CVE-2026-25613CWE-704

An unsafe cast in the MongoDB query planner can result in a segmentation fault.

High · published February 10, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
41.1
In the wild
Unconfirmed
What it is

An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00488 · 41.1th percentile
Weakness
CWE-704 · Incorrect Type Conversion or Cast
Published
2026-02-10T18:54Z
EPSS history
Timeline
  • 10 FEB 18:54Z
    An unsafe cast in the MongoDB query planner can result in a segmentation fault.
    cvelistv5