CVE-2026-25612
Medium · 6.5CVSS
6.5
EPSS
0.4%
Published
Feb 10, 2026
CISA due date
—
The record
The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with one another in this representation causing unavailability between them due to conflicting locks.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|