CVE-2026-82055 in MongoDBИнформация

Сводка

по MITRE • 08.09.2026

A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted GeoJSON document is inserted into a collection with a 2dsphere index, an inconsistency in geometry parsing can leave an internal object in an invalid, partially initialized state. During subsequent index key generation, access to this improperly initialized object results in a null pointer dereference that terminates the mongod process. An authenticated user with write access can use this to cause a denial of service.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Ответственный

Mongodb

Резервировать

28.08.2026

Раскрытие

08.09.2026

Модерация

принято

Вход

VDB-399918

EPSS

0.00000

KEV

Нет

Деятельности

Очень низкий

Источники

Do you need the next level of professionalism?

Upgrade your account now!