CVE-2026-13057 | MongoDB Server up to 8.0.27/8.2.11/8.3.6 Atlas Search $search/$searchMeta input validation

July 22, 2026 Yanac

A vulnerability was found in MongoDB Server up to 8.0.27/8.2.11/8.3.6. It has been rated as critical. Affected is the function $search/$searchMeta of the component Atlas Search. The manipulation of the argument $search/$searchMeta leads to improper input validation.

This vulnerability is listed as CVE-2026-13057. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More