CVEvulnerability

CVE-2026-1848

8.2 HIGH Published 2026-02-10 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2026-02-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
8.2 HIGH — CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-770

Description

Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header.

Affected configurations

• mongodb mongodb (>= 7.0.0 < 7.0.29) • mongodb mongodb (>= 8.0.0 < 8.0.18) • mongodb mongodb (>= 8.2.0 < 8.2.4)

Related

Weakness · CWE (1)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References