CVE-2026-9737

MEDIUM

Find command with $meta sort can lead to crash

Title source: cna

Description

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure.

References (1)

Core 1

Core References

https://jira.mongodb.org/browse/SERVER-128341

Scores

CVSS v3 6.5

EPSS 0.0024

EPSS Percentile 14.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-617

Status published

Products (4)

MongoDB/MongoDB Server 7.0 - 7.0.39

MongoDB/MongoDB Server 8.0 - 8.0.28

MongoDB/MongoDB Server 8.2.0 - 8.2.12

MongoDB/MongoDB Server 8.3.0 - 8.3.7

Published Jul 22, 2026

Tracked Since Jul 23, 2026