Skip to content
cyberMEDIUM2026-05-07 06:16 UTC

CVE-2026-8063 - Post-auth null pointer dereference when aggregating against a view with empty search pipeline

CVE ID :CVE-2026-8063 Published : May 7, 2026, 6:16 a.m. | 39 minutes ago Description :An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view. When resolving a view, the server inspects the aggregation pipeline to determine whether it

ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD

Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.

GET THE SUNDAY BRIEFING →

RELATED · cyber