{
  "cveId": "CVE-2026-25612",
  "url": "https://patchblox.com/security/cve/CVE-2026-25612",
  "summary": "CVE-2026-25612 is fixed in MongoDB on 1 platform by MongoDB 8.2.4 (version 8.2.4), released January 15, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Internal ResourceId collision may affect unrelated collections",
  "description": "The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with one another in this representation causing unavailability between them due to conflicting locks.",
  "published": "2026-02-10T18:16:37Z",
  "severity": "",
  "cvss": 7.1,
  "cwe": "CWE-412: Unrestricted Externally Accessible Lock",
  "epss": 0.00232,
  "epssPercentile": 0.14112,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2026-25612",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "MongoDB",
      "fixedVersion": "8.2.4",
      "fix": "MongoDB 8.2.4",
      "url": "https://patchblox.com/security/fix/windows-app/mongodb.server-8.2.4",
      "released": "2026-01-15T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}