CVE-2026-13065 in Server
Zusammenfassung
von MITRE • 22.07.2026
A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort specifications during execution.
If you want to get best quality of vulnerability data, you may have to visit VulDB.