#mongodb

2 articles

Security Alerts Nov 10, 2026

CVE-2026-118383: Use-After-Free in MongoDB Server Replication

A use-after-free in the MongoDB Server replication component, triggerable by unauthenticated requests, may crash the server or allow code execution. Replica set members are affected...

Security Alerts Jul 6, 2026

CVE-2026-48204: header-controlled GridFS operation selection in Apache Camel MongoDB GridFS (CVSS 9.8)

Improper Input Validation, Improper Access Control vulnerability in Apache Camel in Camel Mongodb Gridfs component. The camel-mongodb-gridfs producer selects the GridFS operation to perform from the ...