SecurityOnlineDo Son
MongoDB flaws risk unauthenticated crashes and data corruption
Part of the CVE-2026-11933 story · since 17 Jun
- Wed 17 Jun, 01:30 UTC. SecurityOnline, first report. MongoDB flaws risk unauthenticated crashes and data corruption. This article, 1st of 1.
A new vulnerability in MongoDB servers has been identified, with four critical flaws posing risks to widely used document databases. The most serious vulnerabilities, CVE-2026-11933 and CVE-2026-9740, score 8.7 on the CVSS scale and can lead to memory leak and server crashes. Two additional issues, CVE-2026-9750 and CVE-2026-9743, also pose threats by allowing authenticated users to corrupt internal metadata and cause server downtime.
Administrators are urged to upgrade to patched versions (8.0.26, 8.2.11, 8.3.4) promptly, especially due to the unauthenticated nature of one flaw that does not require login.
How the story developed
1 article from 1 outlet since 17 Jun. Quiet since 17 Jun. This was the first report.
- Wed 17 Jun, 01:30 UTC. SecurityOnline, first report. MongoDB flaws risk unauthenticated crashes and data corruption. This article, 1st of 1.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 1 articles as a listHide the list
- Wed 17 JunDay 01
- MongoDB flaws risk unauthenticated crashes and data corruption01:30 · SecurityOnline · First report · This article, 1st of 1