Security Advisory
CVE-2026-13066
6.5
MEDIUM
Vulnerability Description
Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being included in data returned to the client. This constitutes an unintended information disclosure affecting deployments that use server-side JavaScript.
Published Date
July 22, 2026
Official Source
NIST NVD Advisory