Unrated severityNVD Advisory· Published Jul 22, 2026· Updated Jul 23, 2026
Improper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Termination
CVE-2026-13070
Description
A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP response from a remote peer during the TLS handshake. OCSP stapling validation is enabled by default for outgoing TLS connections. Affected scenarios require the remote peer to hold a certificate issued by the cluster's trusted certificate authority, or for the connection to traverse an untrusted network path.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.