CVE-2026-9747NVD

Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.

Severity Level

MEDIUM(6.5)

Published Date

Jun 9, 2026

Last Modified

Jun 9, 2026

Exploitation Status

????

EPSS Score (30-Day)

Data Pending

Root Weakness (CWE)

N/A

CVSS v3.1 Base Metrics

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredLow

User InteractionNone

ScopeUnchanged

ConfidentialityNone

IntegrityNone

AvailabilityHigh

CVE Watchtower