Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
MongoDb Improperly Controlled Sequential Memory Allocation Vulnerability (CVE-2026-13056) - Vulnerability Database

MongoDb Improperly Controlled Sequential Memory Allocation Vulnerability (CVE-2026-13056)

Description

Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error.

References

CVE-2026-13056

Related Vulnerabilities

Chamilo Improper Privilege Management Vulnerability (CVE-2022-27421) High
Common tags: Missing Update Known Vulnerabilities
WordPress URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-4048) Medium
Common tags: Missing Update Known Vulnerabilities
Magento CVE-2020-3718 Vulnerability (CVE-2020-3718) Critical
Common tags: Missing Update Known Vulnerabilities
Magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-3719) High
Common tags: Missing Update Known Vulnerabilities
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-3758) Medium
Common tags: Missing Update Known Vulnerabilities

Severity

Medium

Classification

CVE-2026-13056
CWE-1325
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update
Known Vulnerabilities