VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jul 22, 2026· Updated Sep 30, 2026

CVE-2026-9737

CVE-2026-9737

Description

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • MongoDB/MongoDBllm-fuzzy5 versions
    (expand)+ 4 more
    • (no CPE)
    • cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*range: >=7.0.0,<7.0.39
    • cpe:2.3:a:mongodb:mongodb:9.0.0:alpha0:*:*:-:-:*:*
    • cpe:2.3:a:mongodb:mongodb:9.0.0:alpha1:*:*:-:-:*:*
    • cpe:2.3:a:mongodb:mongodb:9.1.0:alpha0:*:*:-:-:*:*
  • osv-coords
    pkg:bitnami/mongodb
    Range: >= 7.0.0, < 7.0.39

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.