Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover
RedSide Security November 12, 2026 Vulnerability 56 views
A critical pre-authentication MongoDB vulnerability lets an unauthenticated attacker crash a replica set node with two requests—triggering an outage only when that lagging server is promoted to primary during failover.
patching
denial of service
MongoDB
CVE-2026-118383
database security
replica sets
pre-auth vulnerability
Continue reading: Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) C…
