Dashboard / CVE-2026-13065

CVE-2026-13065

HIGH
MEDIUM Priority: 0.04 BB Relevance: 64/100
Published: 2026-07-22 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: None
VI: None
VA: High

Description

A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort specifications during execution.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
mongodb mongodb 7.0.0 – 7.0.39
mongodb mongodb 8.0.0 – 8.0.28
mongodb mongodb 8.2.0 – 8.2.12
mongodb mongodb 8.3.0 – 8.3.7

References & Advisories (1)

https://jira.mongodb.org/browse/SERVER-127280
Vendor Advisory Issue Tracking

Bug Bounty Relevance

64 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

7.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.50%
Raw Score 0.004970
Percentile 42.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00497
2026-10-28
0.00497

Intelligence Sources

nvd ref →

External Links