gcdRadar
tags/Other

mongodb

1 live · 3 on record · last incident 2 days ago

Dec ’25records per month, by first reportNov ’26

Live1

  1. live9.0
    MongoDB Server CVE-2026-118383: Critical MongoDB Server Pre-Auth Crash Flaw

    Patch now · Disclosed · Patched · since 12 Nov 2026 · CVE-2026-118383

    A critical pre-authentication vulnerability in MongoDB Server allows unauthenticated attackers to crash lagging replica servers during failover events. The vendor has released patches to address the issue.

    Do:Update MongoDB Server to the latest fixed version.

Earlier2

  1. closed6.0
    LangChain family CVE-2026-106119: LangChain MongoDBChatMessageHistory Query Injection

    Patch now · Disclosed · since 6 Oct 2026 · CVE-2026-106119

    AI
  2. closed7.7
    LangChain family CVE-2026-55253: LangChain MongoDB integrations vulnerable to query injection

    Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-55253

    AI