CVE-2026-13065

MediumCVSS 6.5/10Last modified Oct 24, 2026

Description

A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort specifications during execution.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published: Jul 22, 2026
Last modified: Oct 24, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-130666.5Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process m CVE-2026-130676.3When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the CVE-2026-130684.3An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a se CVE-2026-130696.5An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a MongoDB server by sending a crafted Queryable Enc CVE-2026-13076.5The Ninja Forms - The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Sensitive Information Exposure in all v CVE-2026-130705.3A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP response from a remote peer CVE-2026-130716.5An authenticated user with read access can cause the mongod process to be terminated through certain aggregation expressions that execute se CVE-2026-130728.1When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pip CVE-2026-130734.3An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation comman CVE-2026-130745.3An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combination of parameters to CVE-2026-130756.5An authenticated user can cause the mongod process to be terminated by the operating system under memory pressure via the $rankFusion and $s CVE-2026-130766.5An authenticated user can cause a {{mongod}} process to be terminated by the operating system under memory pressure by performing a specific