7.1
/ 10
HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Description
Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server.
This issue affects all MongoDB Server v8.2 versions, all MongoDB Server v8.1 versions, MongoDB Server v8.0 versions prior to 8.0.21, MongoDB Server v7.0 versions prior to 7.0.32
This issue affects all MongoDB Server v8.2 versions, all MongoDB Server v8.1 versions, MongoDB Server v8.0 versions prior to 8.0.21, MongoDB Server v7.0 versions prior to 7.0.32
Basic Information
ID
CVE-2026-6914
Source
mongodb
Published
Apr 29, 2026 at 16:47
Affected Product
Vendor
MongoDB
Product
MongoDB Server
Version
8.2.0
Affected Versions
MongoDB MongoDB Server 8.2.0
MongoDB MongoDB Server 8.1.0
MongoDB MongoDB Server 8.0.0
MongoDB MongoDB Server 7.0.0
MongoDB MongoDB Server 8.1.0
MongoDB MongoDB Server 8.0.0
MongoDB MongoDB Server 7.0.0