Buffer overflow in MongoDB Server
CVE-2026-82071
Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process, causing a denial of service via server crash, with potential for further impact including arbitrary code execution.
Vulnerability class: Buffer Overflow
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.
Affected products
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-82071?
- CVE-2026-82071 is a high-severity vulnerability in MongoDB Server, classified under Out-of-bounds Write. CVSS score: 8.1/10. Published 2026-09-08.
- How severe is CVE-2026-82071?
- High severity. CVSS v3 base score is 8.1 out of 10.