CVE-2026-120803 | MongoDB up to 8.3.15/9.0.6 SBE Window Function Accumulator use after free

November 10, 2026 Yanac

A vulnerability classified as critical has been found in MongoDB up to 8.3.15/9.0.6. This affects an unknown function of the component SBE Window Function Accumulator. This manipulation causes use after free.

The identification of this vulnerability is CVE-2026-120803. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More