Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
MongoDb Improperly Controlled Sequential Memory Allocation Vulnerability - CVE-2026-8199 - Vulnerability Database
MongoDb

MongoDb Improperly Controlled Sequential Memory Allocation Vulnerability - CVE-2026-8199

Medium
Reference: CVE-2026-8199
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-8199
Title: MongoDb Improperly Controlled Sequential Memory Allocation Vulnerability
Overview:

An authenticated user can cause excess memory usage via bitwise match expression AST processing of bitsAllSet bitsAnySet bitsAllClear and bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts MongoDB Server v7.0 versions prior to 7.0.34 v8.0 versions prior to 8.0.23 v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.