CVE-2026-96299 | MongoDB Server up to 8.3.12/9.0.3 Match Expression Evaluator memory allocation

October 13, 2026 Yanac

A vulnerability, which was classified as critical, has been found in MongoDB Server up to 8.3.12/9.0.3. This vulnerability affects unknown code of the component Match Expression Evaluator. The manipulation leads to uncontrolled memory allocation.

This vulnerability is documented as CVE-2026-96299. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More