CVE-2026-13077 | MongoDB Server up to 7.0.38/8.0.27/8.2.11/8.3.6 Aggregation out-of-bounds

July 22, 2026 Yanac

A vulnerability identified as problematic has been detected in MongoDB Server up to 7.0.38/8.0.27/8.2.11/8.3.6. This issue affects some unknown processing of the component Aggregation Handler. Performing a manipulation results in out-of-bounds read.

This vulnerability is cataloged as CVE-2026-13077. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More