High severity8.1NVD Advisory· Published Jun 9, 2026· Updated Jun 10, 2026
CVE-2026-9753
CVE-2026-9753
Description
The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
1News mentions
1- MongoDB: Nine Vulnerabilities Disclosed, Including Server Crashes and Data ExposureVypr Intelligence · Jun 9, 2026