Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover

9 hours ago [email protected] (The Hacker News)
Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover


A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trigger a crash on the database server. The crash occurs only if that server is later chosen to take over as the main server while it still lacks some recent changes.

MongoDB, the company that makes the database, released fixed versions earlier this week.

The affected servers are members of a replica

The post “Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover” appeared first on The Hacker News

Source:The Hacker News – [email protected] (The Hacker News)

Tags: , ,

More Stories

Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry

2 hours ago [email protected] (The Hacker News)

Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass

3 hours ago [email protected] (The Hacker News)

New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access

7 hours ago [email protected] (The Hacker News)

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

13 hours ago [email protected] (The Hacker News)

ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients

14 hours ago [email protected] (The Hacker News)

Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation

1 day ago [email protected] (The Hacker News)