Critical MongoDB Flaw Lets Attackers Crash Database Servers With Just Two Ping Requests

MongoDB has patched a critical flaw, tracked as CVE-2026-118383, that can let a remote attacker with no login crash a database server using two simple ping requests. The bug carries a CVSS v4.0 score of 9.5. It sits in the replication code that runs when a new primary server finishes catching up. MongoDB announced the […]

This article has been indexed from Cyber Security News