VULNERABILITY INTELLIGENCE
CVE-2026-9754
CVSS score6.5 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2026-06-09
Last modified2026-07-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command
Weakness classification
- cna@mongodb.com: CWE-457
Primary references
- cna@mongodb.com — Patch, Vendor Advisory