Servers and applications
CVE-2026-82054
A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size, resulting in significant memory amplification. Under concurrent request load, the cumulative memory…
- Severity
- High 7.1
- Published
- 8 Sept 2026
- Last changed
- 16 Sept 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 7.0.41, 8.0.30, 8.3.9
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
MongoDBServers and applications · cpe:a:mongodb:mongodb |
All 7 release lines
|