Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
MongoDb Access of Resource Using Incompatible Type (Type Confusion) Vulnerability - CVE-2026-13066 - Vulnerability Database
MongoDb

MongoDb Access of Resource Using Incompatible Type (Type Confusion) Vulnerability - CVE-2026-13066

Medium
Reference: CVE-2026-13066
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-13066
Title: MongoDb Access of Resource Using Incompatible Type (Type Confusion) Vulnerability
Overview:

Improper handling of DBPointer objects during BSON serialization in MongoDB39s server-side JavaScript engine can result in internal process memory contents being included in data returned to the client. This constitutes an unintended information disclosure affecting deployments that use server-side JavaScript.