Description
An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This issue can only be triggered by authorized users and cause Denial of Service. This issue affects MongoDB Server v8.1 version 8.1.0.
Remediation
References
Related Vulnerabilities
WordPress Plugin Google Map Backdoor (1.4)
WordPress Plugin Migration, Backup, Staging-WPvivid Security Bypass (0.9.35)
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-2484)
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-26114)
WordPress Plugin Forums 'url' Parameter Arbitrary File Disclosure (1.4.3)