CVE-2026-120809 | MongoDB Server up to 8.0.36/8.3.15/9.0.6 SBE Engine use after free

November 10, 2026 Yanac

A vulnerability described as critical has been identified in MongoDB Server up to 8.0.36/8.3.15/9.0.6. The impacted element is an unknown function of the component SBE Engine. The manipulation results in use after free.

This vulnerability was named CVE-2026-120809. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More