Cybersecurity & Data Protection
1
UPVOTE
thehackernews.com

Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover

A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trigger a crash on the database server. The crash occurs only if that server is later chosen to take over as the main server while it still lacks some recent changes. MongoDB, the company that makes the database, released fixed versions earlier this week. The affected servers are members of a replica
Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover
Marcus Allen

Marcus Allen

1d ago
1 0

Discussion

Be the first to comment

Add your perspective to get the discussion started.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

thanakorn_boon477

Thanakorn Boon

Thanakorn BoonUpvoted 1d ago0 comments · 54 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

darkreading.com
Attackers in Binance Breach Targeted Known Weakness, Missing Co…

Blockchain complexities, such as attacker-deployed sweepers, hobble security controls designed to limit the damage of an exchange compromise.
DR

Dark Reading

1h ago
0
thehackernews.com
Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Depl…

An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then…
JA

jordan af

6h ago
0
bleepingcomputer.com
New worm-like 'SCKit' malware targets MSPs in ScreenConnect att…

A new worm-like malware toolkit named SCKit was deployed in the recent ScreenConnect attacks targeting managed service providers (MSPs), designed to spread fro…
Rosa Martinez

Rosa Martinez

7h ago
0
bleepingcomputer.com
Hackers compromise 4,800 GitHub accounts to steal cloud credent…

A new campaign dubbed 'wfx-loot' has unfolded on GitHub where threat actors used 4, 837 compromised accounts to probe 61, 764 repositories, open pull requests,…
MB

Maria Bakker

18h ago
0
bleepingcomputer.com
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot w…

Microsoft is investigating a widespread outage affecting multiple Microsoft 365 services, including Outlook, Microsoft Teams, and Copilot, as users report conn…
alex but tired

alex but tired

18h ago
0
darkreading.com
Inside an AI Attack Against a US Retailer

When hand-typed commands failed to breach a US retailer, the attacker turned to AI-generated scripts, achieving lateral movement in minutes.
DR

Dark Reading

23h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Depl…

An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then…
JA

jordan af

6h ago
0
thehackernews.com
Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Ac…

Google Cloud VMs on AMD Turin chips need a guest OS patch and a stop-and-start to protect against three CPU side-channel flaws, Google said this week. The com…
EK

Emma Klein

1d ago
0
thehackernews.com
Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers…

A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects vers…
TN

The Hacker News

1d ago
0
thehackernews.com
Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote…

Zoom has released software updates to address two security flaws impacting Zoom Workplace for Windows, including a critical bug that could result in privilege…
Thanakorn Boon

Thanakorn Boon

1d ago
0
thehackernews.com
Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confid…

Of the 37, 571 Grok-built apps that security company Claroc found online, 35, 578 were open to anyone without a sign-in, the researchers said yesterday. They…
Thanakorn Boon

Thanakorn Boon

2d ago
0
thehackernews.com
Git Patches Flaw That Lets Malicious Repositories Execute Code …

A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fix…
Carlos the great

Carlos the great

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest