CVE 7.1 HIGH

MD5 checksum creation may cause availability loss_CVE-2026-6914

7.1 / 10
HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Description

Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server.
This issue affects all MongoDB Server v8.2 versions, all MongoDB Server v8.1 versions, MongoDB Server v8.0 versions prior to 8.0.21, MongoDB Server v7.0 versions prior to 7.0.32

Basic Information

ID CVE-2026-6914
Source mongodb
Published Apr 29, 2026 at 16:47

Affected Product

Vendor MongoDB
Product MongoDB Server
Version 8.2.0
Affected Versions MongoDB MongoDB Server 8.2.0
MongoDB MongoDB Server 8.1.0
MongoDB MongoDB Server 8.0.0
MongoDB MongoDB Server 7.0.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.