onyx

onyx --cves cve-2026-82061

CVE-2026-82061

HIGHMongoDB
score
0.3
cvss
8.1
epss
0.5%
published
2026-09-08
kev added
—
first seen

The server contains a use-after-free vulnerability in the query execution memory tracking subsystem, letting authenticated users with read privileges cause memory corruption or crash, exploit requires authenticated read access.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2026-09-08 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score 0.30.3epss2026-09-22: epss 0.3%2026-09-23: epss 0.3%2026-09-24: epss 0.5%2026-09-25: epss 0.5%2026-09-26: epss 0.5%2026-09-27: epss 0.5%2026-09-29: epss 0.5%2026-09-30: epss 0.5%2026-10-01: epss 0.5%2026-10-02: epss 0.5%2026-10-03: epss 0.5%2026-10-04: epss 0.5%2026-10-05: epss 0.5%2026-10-06: epss 0.5%2026-10-07: epss 0.5%2026-10-08: epss 0.5%2026-10-09: epss 0.5%2026-10-10: epss 0.5%2026-10-11: epss 0.5%2026-10-12: epss 0.5%2026-10-13: epss 0.5%2026-10-14: epss 0.5%2026-10-15: epss 0.5%2026-10-16: epss 0.5%2026-10-18: epss 0.5%2026-10-19: epss 0.5%2026-10-20: epss 0.5%2026-10-21: epss 0.5%0.5%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-416

References 1