Back to all news
Security

Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover

The Hacker News·November 12, 2026·1 min read
Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover

A critical pre-authentication flaw in MongoDB Server, tracked as CVE-2026-118383, lets an unauthenticated attacker send two requests to crash a database server, but only if that server is later promoted to primary while missing recent changes. MongoDB released fixed versions earlier this week. Affected servers are members of a replica set.

Read at The Hacker News
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store