Skip to content
Threat Feed
Subscribe

Tag

Mongodb

4 briefs RSS
medium threat

OpenTelemetry eBPF Instrumentation MongoDB Parser Denial-of-Service

Malformed MongoDB wire messages can trigger uncaught panics in the OpenTelemetry eBPF Instrumentation agent's MongoDB TCP parser, allowing a remote unauthenticated attacker to crash the telemetry agent and cause a denial of service.

go.opentelemetry.io/obi opentelemetry mongodb denial-of-service CVE-2026-45685
2r 1t
medium advisory

MongoDB Timeseries Collection Vulnerability (CVE-2026-8053)

MongoDB published a security advisory to address CVE-2026-8053, an undefined behavior vulnerability when inserting data with duplicate field names into timeseries collections, affecting versions 5.0.0 through 8.3.1.

MongoDB 8.3.0 +11 mongodb cve-2026-8053 timeseries denial of service
1r 1c
high advisory

MongoDB Multiple Vulnerabilities

An authenticated remote attacker can exploit vulnerabilities in MongoDB to execute arbitrary code, manipulate data, disclose confidential information, or cause a denial-of-service condition.

MongoDB vulnerability code execution data breach denial of service
2r 4t
high advisory

MongoDB Vulnerability Allows Local Code Execution

A local attacker can exploit a vulnerability in MongoDB to execute arbitrary code, potentially leading to privilege escalation and system compromise.

MongoDB code-execution privilege-escalation
2r 2t