{"metadata": {"vulnerability": "CVE-2026-96299", "count": 19, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-09-22T22:29:05.501Z", "date_only": false, "value": "2026-09-22T22:29:05.501Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-96299", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1304", "record": "CERTFR-2026-AVI-1304", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T15:27:57.250Z", "date_only": false, "value": "2026-10-13T15:27:57.250Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-96299", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T15:42:56.138Z", "date_only": false, "value": "2026-10-13T15:42:56.138421Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434363111024723", "record": "CVE-2026-96299", "field": "creation_timestamp", "uuid": "e1a53aff-3997-4a4d-af71-3a1a413775f1", "content": "CVE-2026-96299 MongoDB Nested `$_internalSchemaAllElemMatchFromIndex` Cross-Product MatchExpression OOM Missing limits on resource use in the match expression evaluator of MongoDB Server can cause the server to consume excessive memory. Internal schema validation operators that are meant only for server use are accepted in user-supplied query filters. When these operators are nested and applied to documents that contain arrays, the server evaluates every combination of array elements without a sufficient limit on the resources used. This can cause memory use to grow until the mongod process runs out of memory and terminates. The behavior can occur when an authenticated user with read-only privileges runs an aggregation query that nests these operators.\nhttps://www.cve.org/CVERecord?id=CVE-2026-96299https://jira.mongodb.org/browse/SERVER-130431#mongodb #MongoDB #MongoDBServer#CVE_2026_96299#bot", "url": "https://infosec.exchange/users/cve/statuses/117434363111024723"}, {"timestamp": "2026-10-13T15:46:45.492Z", "date_only": false, "value": "2026-10-13T15:46:45.492569Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-96299", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T15:46:45.492Z", "date_only": false, "value": "2026-10-13T15:46:45.492569Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96299", "record": "FKIE_CVE-2026-96299", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T16:17:00Z", "date_only": false, "value": "2026-10-13T16:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-96299", "record": "UBUNTU-CVE-2026-96299", "field": "published"}, {"timestamp": "2026-10-13T16:17:00Z", "date_only": false, "value": "2026-10-13T16:17:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-96299", "record": "UBUNTU-CVE-2026-96299", "field": "modified"}, {"timestamp": "2026-10-13T16:17:24Z", "date_only": false, "value": "2026-10-13T16:17:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PPM2-9QG4-QQ47", "record": "GHSA-PPM2-9QG4-QQ47", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T16:17:24.323Z", "date_only": false, "value": "2026-10-13T16:17:24.323", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96299", "record": "FKIE_CVE-2026-96299", "field": "published"}, {"timestamp": "2026-10-13T16:20:06.272Z", "date_only": false, "value": "2026-10-13T16:20:06.272Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-96299", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T16:31:19.871Z", "date_only": false, "value": "2026-10-13T16:31:19.871Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-96299", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T16:31:19.871Z", "date_only": false, "value": "2026-10-13T16:31:19.871Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mongodb", "record": "CVE-2026-96299", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T18:30:52Z", "date_only": false, "value": "2026-10-13T18:30:52Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PPM2-9QG4-QQ47", "record": "GHSA-PPM2-9QG4-QQ47", "field": "published"}, {"timestamp": "2026-10-13T18:30:52Z", "date_only": false, "value": "2026-10-13T18:30:52Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PPM2-9QG4-QQ47", "record": "GHSA-PPM2-9QG4-QQ47", "field": "modified"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1304", "record": "CERTFR-2026-AVI-1304", "field": "last_revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1304", "record": "CERTFR-2026-AVI-1304", "field": "initial_release_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1304", "record": "CERTFR-2026-AVI-1304", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-15T20:38:04.303Z", "date_only": false, "value": "2026-10-15T20:38:04.303", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96299", "record": "FKIE_CVE-2026-96299", "field": "lastModified"}]}