VULNERABILITY INTELLIGENCE

CVE-2026-9737

CVSS score6.5 MEDIUM
EPSS probability0.42%
CISA KEVNot currently listed
Published2026-07-22
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure.

Weakness classification

  • cna@mongodb.com: CWE-617

Primary references