CVE-2026-9737
Medium · 6.5CVSS
6.5
EPSS
0.4%
Published
Jul 22, 2026
CISA due date
—
The record
During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119339 Tesseract is an open source OCR engine. CWE-617
- CVE-2026-119139 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in… CWE-617
- CVE-2026-119142 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service… CWE-617
- CVE-2026-119138 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service… CWE-617
- CVE-2026-119135 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a… CWE-617
- CVE-2026-119132 Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows… CWE-617
- CVE-2026-116467 A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. CWE-617
- CVE-2026-115914 vLLM is an inference and serving engine for large language models. CWE-617