MongoDB Patches Critical Pre-Auth Flaw That Can Crash Replica Set Members on Failover
MongoDB Patches Critical Pre-Auth Flaw That Can Crash Replica Set Members on Failover Add preferred sourceMongoDB released fixes on Nov. 11 for CVE-2026-118383, a use-after-free in MongoDB Server rated 9.5 on CVSS 4.0. An unauthenticated client can send two ping requests carrying readConcern.afterOpTime, which plant persistent waiters on a replica…