https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 13:37:32 +0000 https://cve.radiocsirt.org/vuln/cve-2026-8063 <p><strong>Affected:</strong> MongoDB Inc. MongoDB Server</p> <p>An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view.</p> <p>When resolving a view, the server inspects the aggregation pipeline to determine whether it begins with an Atlas Search stage. For $rankFusion and $scoreFusion, this inspection reads the first element on each stage’s input pipeline array without first verifying that the array is non-empty. Supplying an empty pipeline causes a null pointer dereference and crashes the server.</p> <p>This issue affects MongoDB Server 8.2 versions prior to 8.2.7.</p> <p><strong>Affected:</strong> MongoDB Inc. MongoDB Server</p> <p>An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view.</p> <p>When resolving a view, the server inspects the aggregation pipeline to determine whether it begins with an Atlas Search stage. For $rankFusion and $scoreFusion, this inspection reads the first element on each stage’s input pipeline array without first verifying that the array is non-empty. Supplying an empty pipeline causes a null pointer dereference and crashes the server.</p> <p>This issue affects MongoDB Server 8.2 versions prior to 8.2.7.</p> https://cve.radiocsirt.org/vuln/cve-2026-8063