CVE-2026-13058
Transaction Command Insufficient Input Validation Leading to Process Termination
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An authenticated user with basic write privileges can cause the mongod process to terminate abnormally by sending a crafted transaction command with an incomplete set of required fields. The issue stems from inconsistent validation across related transaction command parameters, resulting in a fatal internal invariant failure and denial of service.
| CWE | CWE-617 |
| Vendor | mongodb |
| Product | mongodb server |
| Ecosystems | |
| Industries | Technology |
| Published | Jul 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for mongodb mongodb server
Be the first to know when new unknown vulnerabilities affecting mongodb mongodb server are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
MongoDB / MongoDB Server
8.0 < 8.0.28 8.2.0 < 8.2.12 8.3.0 < 8.3.7