CVE-2020-7926

6.5 mediumEPSS 1.4%

Medium (6.5) in mongodb mongodb. EPSS 1.4% chance of exploitation in the next 30 days.

A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoDB Server v4.4 versions prior to 4.4.1. Versions before 4.4 are not affected.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-755
Published: 2020-11-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mongodb:mongodb

References

https://jira.mongodb.org/browse/SERVER-50170
https://jira.mongodb.org/browse/SERVER-50170

Check your stack JSON