MEDIUMVulnerability

CVE-2026-82057

A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process. By specifying a custom WiredTiger storage configuration option with an incompatible value during collection creation, a user could cause a type confusion in the storage engine layer. When documents were subsequently read from the misconfigured collection, the resulting mismatch in expected data format led to corrupted memory interpretation and a server crash. The crafted collection configuration persists across restarts, requiring manual operator intervention to remediate.

Properties

severity
MEDIUM
score
6.5
cve_id
CVE-2026-82057
signal_observed_at
2026-09-16T21:37:07+00:00
vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
published_at
2026-09-08T17:18:34.287
last_modified
2026-09-16T20:33:52.627

Related Entities (3)

AFFECTS_PRODUCT (1)

[Product]

DESCRIBED_BY (1)

[Source]NVD

HAS_WEAKNESS (1)

[Weakness]Access of Resource Using Incompatible Type ('Type Confusion')

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-82057 — Ninja Signal Threat Intelligence | Ninja Signal