CVE-2026-8843

Creating a "2dsphere_bucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that index will crash the server. A similar issue occurs when creating "queryable_encrypted_range" indices. This issue affects MongoDB Server v7.0 versions prior to 7.0.32, v8.0 versions prior to 8.0.21 and v8.2 versions prior to 8.2.6

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://jira.mongodb.org/browse/SERVER-116327	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mongodb:mongodb::::::::
	cpe:2.3:a:mongodb:mongodb::::::::
	cpe:2.3:a:mongodb:mongodb::::::::

History

26 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Crear un índice ’2dsphere_bucket’ en una colección bucket que no sea de series temporales tendrá éxito, pero cualquier intento posterior de insertar un documento que active la actualización de ese índice colapsará el servidor. Un problema similar se produce al crear índices ’queryable_encrypted_range’. Este problema afecta a las versiones v7.0 del Servidor MongoDB anteriores a la 7.0.32, a las versiones v8.0 anteriores a la 8.0.21 y a las versiones v8.2 anteriores a la 8.2.6.

24 Sep 2026, 17:31

Type	Values Removed	Values Added
References	~~() https://jira.mongodb.org/browse/SERVER-116327 -~~	() https://jira.mongodb.org/browse/SERVER-116327 - Vendor Advisory
CPE		cpe:2.3:a:mongodb:mongodb::::::::
First Time		Mongodb Mongodb mongodb

Information

Published : 2026-05-18 17:16

Updated : 2026-10-26 13:10

NVD link : CVE-2026-8843

Mitre link : CVE-2026-8843

CVE.ORG link : CVE-2026-8843

JSON object : View

Products Affected

mongodb

mongodb

CWE

CWE-617

Reachable Assertion

{"id": "CVE-2026-8843", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8843", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-19T12:53:43.786879Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@mongodb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "cna@mongodb.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cna@mongodb.com", "affectedData": [{"vendor": "MongoDB, Inc.", "product": "MongoDB Server", "versions": [{"status": "affected", "version": "7.0", "lessThan": "7.0.32", "versionType": "custom"}, {"status": "affected", "version": "8.0", "lessThan": "8.0.21", "versionType": "custom"}, {"status": "affected", "version": "8.2", "lessThan": "8.2.6", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-05-18T17:16:34.563", "references": [{"url": "https://jira.mongodb.org/browse/SERVER-116327", "tags": ["Vendor Advisory"], "source": "cna@mongodb.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "cna@mongodb.com", "description": [{"lang": "en", "value": "CWE-617"}]}], "descriptions": [{"lang": "en", "value": "Creating a \"2dsphere_bucket\" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that index will crash the server. A similar issue occurs when creating \"queryable_encrypted_range\" indices.\n\nThis issue affects MongoDB Server v7.0 versions prior to 7.0.32, v8.0 versions prior to 8.0.21 and v8.2 versions prior to 8.2.6"}, {"lang": "es", "value": "Crear un \u00edndice \u20192dsphere_bucket\u2019 en una colecci\u00f3n bucket que no sea de series temporales tendr\u00e1 \u00e9xito, pero cualquier intento posterior de insertar un documento que active la actualizaci\u00f3n de ese \u00edndice colapsar\u00e1 el servidor. Un problema similar se produce al crear \u00edndices \u2019queryable_encrypted_range\u2019.\n\nEste problema afecta a las versiones v7.0 del Servidor MongoDB anteriores a la 7.0.32, a las versiones v8.0 anteriores a la 8.0.21 y a las versiones v8.2 anteriores a la 8.2.6."}], "lastModified": "2026-10-26T13:10:00.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58FECB68-9AAC-4165-92CE-C4CAEABFA9CB", "versionEndExcluding": "7.0.32", "versionStartIncluding": "7.0.0"}, {"criteria": "cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FBC85DE6-09AD-4CD3-8EEC-2699B4DCFC34", "versionEndExcluding": "8.0.21", "versionStartIncluding": "8.0.0"}, {"criteria": "cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "897E80EC-7E28-43DA-A8A3-F09C1C31E4EB", "versionEndExcluding": "8.2.6", "versionStartIncluding": "8.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "cna@mongodb.com"}