Ghostwire

CVE-2026-9750: An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that...

HIGH CVSS 7.5

Published: June 9, 2026 | Last Modified: June 9, 2026

Description

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (2 articles)

References