Skip to content

CVE record · 1 source

CVE-2026-118383

CVSS 9.0

A use-after-free in the replication component of MongoDB Server can occur when a newly elected replica set primary completes catch-up.

Vendor: MongoDB
Product: MongoDB Server
CVSS v3.1: 9.0 AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness: CWE-416
Exposure class: Database

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

29

CVE NVD 25h ago

A use-after-free in the replication component of MongoDB Server can occur when a newly elected replica set primary completes catch-up.

A use-after-free in the replication component of MongoDB Server can occur when a newly elected replica set primary completes catch-up. The condition can be caused by requests that do not require authentication, and may result in…

CVSS 9.0 CVE-2026-118383 MongoDB