MEDIUMVulnerability

CVE-2026-82065

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable metadata, trigger a fatal assertion failure when the metadata is subsequently read by diagnostic operations. The corrupted metadata persists across server restarts and is replicated to other cluster members, requiring manual operator intervention to restore service.

Properties

severity
MEDIUM
score
6.5
cve_id
CVE-2026-82065
signal_observed_at
2026-09-16T21:37:07+00:00
vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
published_at
2026-09-08T17:18:35.360
last_modified
2026-09-16T20:37:30.310

Related Entities (3)

AFFECTS_PRODUCT (1)

[Product]

DESCRIBED_BY (1)

[Source]NVD

HAS_WEAKNESS (1)

[Weakness]Reachable Assertion

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-82065 — Ninja Signal Threat Intelligence | Ninja Signal