CVE-2026-120818 | MongoDB up to 7.0.47/8.0.36/8.3.15 Aggregation use after free

November 10, 2026 Yanac

A vulnerability was found in MongoDB up to 7.0.47/8.0.36/8.3.15. It has been declared as critical. This impacts an unknown function of the component Aggregation Handler. Executing a manipulation can lead to use after free.

This vulnerability appears as CVE-2026-120818. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More