CVE-2026-25611

A series of specifically crafted, unauthenticated messages can exhaust available memory and crash a MongoDB server.

Score

CVSS 4.0 8.7 High

Status

Deferred - cna@mongodb.com

Published

2026-02-10

Last modified

2026-02-11

Weaknesses

CWE-405

Affected products

• Mongodb Server (Mongodb Inc)

References

• https://jira.mongodb.org/browse/SERVER-116206
• https://jira.mongodb.org/browse/SERVER-116210
• https://jira.mongodb.org/browse/SERVER-116211