CyberRota
← Ana sayfaya dön

CVE-2026-9100

MEDIUM · CVSS 5.9 EPSS %0.28

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-05-20T17:16:32.360 · Çekilme zamanı: 2026-06-17T12:01:27.693071+00:00

CyberRota Yorumu

MongoDB kullanan sistemleri etkileyebilir. Bellek tüketimine neden olabilir.

CVE
CVE-2026-9100
Severity
MEDIUM
CVSS
5.9
EPSS
%0.28
MongoDB

Orijinal NVD Açıklaması

The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation. Crafted documents in a GridFS collection may cause any application that reads those files via the legacy API to either crash (via a division-by-zero) or silently leak process memory contents (via an out-of-bounds read).