CVE-2026-13072 | MongoDB Server up to 7.0.38/8.0.27/8.2.11/8.3.6 Aggregation memory corruption

July 22, 2026 Yanac

A vulnerability was found in MongoDB Server up to 7.0.38/8.0.27/8.2.11/8.3.6 and classified as critical. Affected is an unknown function of the component Aggregation. Executing a manipulation can lead to memory corruption.

The identification of this vulnerability is CVE-2026-13072. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More