https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T07:42:34.214848+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bit-mongodb-2026-13055 BIT-mongodb-2026-13055 — Server crash via aggregation pipeline expression with compound wildcard index specification 2026-09-29T07:42:34.627981+00:00

Affected: Bitnami: mongodb

The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency check that aborts the server process. The user must be able to run an aggregation pipeline.

 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0922 certfr-2026-avi-0922 — De multiples vulnérabilités ont été découvertes dans MongoDB. Elles permettent à un attaquant de provoquer un contourne… 2026-09-29T07:42:34.628138+00:00 certfr-2026-avi-0922 https://vulnerability.circl.lu/vuln/fkie_cve-2026-13055 fkie_cve-2026-13055 2026-09-29T07:42:34.628186+00:00

The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency check that aborts the server process. The user must be able to run an aggregation pipeline.

 https://vulnerability.circl.lu/vuln/ghsa-c3m4-h7px-8423 GHSA-c3m4-h7px-8423 2026-09-29T07:42:34.628234+00:00

The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency check that aborts the server process. The user must be able to run an aggregation pipeline.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-13055 UBUNTU-CVE-2026-13055 2026-09-29T07:42:34.628269+00:00

Affected: Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency check that aborts the server process. The user must be able to run an aggregation pipeline.