SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89099

HIGH · CVSS 7.5 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A race condition in the document value layer of MongoDB Server allows authenticated users with ordinary read-write privileges to manipulate shared internal memory concurrently, potentially leading to memory corruption and server termination. This vulnerability can compromise the confidentiality, integrity, and availability of the server process. Organizations using MongoDB should prioritize this issue to mitigate risks associated with unauthorized access and data corruption.

CVE
CVE-2026-89099
Severity
HIGH
CVSS
7.5
EPSS
0.18%
MongoDB

Original NVD Description

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this condition over the normal client protocol, resulting in server termination and potential corruption of process memory with user-influenced content. Successful use of this issue may impact the confidentiality, integrity, and availability of the affected server process.