CVE-2026-9737CWE-617

CVE-2026-9737

Medium · published July 23, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00420 · 35.2th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2026-07-23T00:17Z
Affected products (7)
ProductVersionsFixed in
mongodb/mongodb≥ 7.0.0, < 7.0.397.0.39
mongodb/mongodb≥ 8.0.0, < 8.0.288.0.28
mongodb/mongodb≥ 8.2.0, ≤ 8.2.12—
mongodb/mongodb≥ 8.3.0, < 8.3.78.3.7
mongodb/mongodball versions—
mongodb/mongodball versions—
mongodb/mongodball versions—
References (1)
https://jira.mongodb.org/browse/SERVER-128341 · [email protected]
EPSS history
Timeline
  • 22 JUL 19:20Z
    Find command with $meta sort can lead to crash
    cvelistv5