[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIC7XMYaYxiPg1gHtch--Nw4XyW0IU89Bj4VTJs-obXA":3},{"article":4,"iocs":45,"watch_terms":50,"solutions":51,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"8da49295-6fa3-4e39-a3aa-d3d9b7393f5b","Critical MongoDB Flaw Lets Attackers Crash Database Servers With Just Two Ping Requests","critical-mongodb-flaw-lets-attackers-crash-database-servers-with-just-two-ping-r-f0bcb6","MongoDB has patched a critical flaw, tracked as CVE-2026-118383, that can let a remote attacker with no login crash a database server using two simple ping requests. The bug carries a CVSS v4.0 score of 9.5. It sits in the replication code that runs when a new primary server finishes catching up. MongoDB announced the […] The post Critical MongoDB Flaw Lets Attackers Crash Database Servers With Just Two Ping Requests appeared first on Cyber Security News.","MongoDB has patched a critical vulnerability, CVE-2026-118383, that allows unauthenticated remote attackers to crash database servers using two ping requests. The bug, a use-after-free flaw in the replication code, has a CVSS v4.0 score of 9.5 and affects replica set members. While MongoDB is unaware of any active exploitation, Datadog Security Labs demonstrated a successful crash on a vulnerable version.","Critical MongoDB flaw allows remote attackers to crash database servers with two ping requests.","https:\u002F\u002Fcybersecuritynews.com\u002Fmongodb-database-crash-vulnerability\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002FMongoDB-database-crash-vulnerability.webp","2026-11-12T12:22:28+00:00","2026-11-12T13:00:30.076426+00:00",8,[17,20,22,25],{"name":18,"type":19},"MongoDB","product",{"name":18,"type":21},"vendor",{"name":23,"type":24},"replication code","technology",{"name":26,"type":24},"use-after-free","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":27,"icon":29,"name":30,"slug":31},null,"Vulnerabilities","vulnerabilities",[33,35,40],{"category":34},{"id":27,"icon":29,"name":30,"slug":31},{"category":36},{"id":37,"icon":29,"name":38,"slug":39},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":41},{"id":42,"icon":29,"name":43,"slug":44},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[46],{"type":47,"value":48,"context":49},"cve","CVE-2026-118383","Critical MongoDB flaw",[18],{"controls":52,"vendors":139},[53,82,110],{"slug":54,"name":55,"problem":56,"products":57},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"slug":83,"name":84,"problem":85,"products":86},"patch-management","Automated patch management","Known holes get closed in days, not months.",[87,95,102],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":83,"product_name":99,"url":100,"description":101},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"slug":111,"name":112,"problem":113,"products":114},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[115,123,131],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",[],{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":150},"critical-mongodb-crash-bug-exploitable-without-authentication","Critical MongoDB Crash Bug Exploitable Without Authentication","A use-after-free vulnerability in MongoDB's replication code (CVE-2026-118383) allows an unauthenticated attacker to crash a database server with just two crafted ping requests, earning a near-maximum CVSS v4.0 score of 9.5. The flaw targets replica set members, meaning a single successful attack can destabilize an entire database cluster, not just one node. Because no authentication is required, any network-accessible MongoDB instance running an unpatched version is at immediate risk of denial-of-service. This incident underscores how memory-safety bugs in core infrastructure components can have outsized availability consequences, and why rapid patch deployment for critical database systems is non-negotiable.",[145,146,147,148,149],"CIS Control 7: Continuous Vulnerability Management (v8)","CIS Control 12: Network Infrastructure Management (v8)","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 RS.MI-03: Newly identified vulnerabilities are mitigated or documented as accepted risks","NIS2 Article 21(2)(e)",{"NIS2 Article 21(2)(e)":151,"NIST SP 800-53 SI-2: Flaw Remediation":152,"CIS Control 12: Network Infrastructure Management (v8)":153,"CIS Control 7: Continuous Vulnerability Management (v8)":154,"NIST CSF 2.0 RS.MI-03: Newly identified vulnerabilities are mitigated or documented as accepted risks":155},"NIS2 Article 21(2)(e) requires security in acquisition, development, and maintenance including vulnerability handling, obligating operators of essential services to have processes for rapidly addressing critical flaws in components like MongoDB.","SI-2 mandates identifying, reporting, and correcting system flaws within defined timeframes, directly addressing the need for timely patching of this critical MongoDB vulnerability.","CIS Control 12 calls for restricting network access to only necessary services, which would have prevented unauthenticated external actors from sending ping requests to MongoDB replica set members.","CIS Control 7 requires organisations to continuously assess and remediate vulnerabilities; applying this would have ensured the MongoDB flaw was identified and patched before attackers could exploit it.","This category requires that once a critical vulnerability like CVE-2026-118383 is disclosed, organisations act to mitigate it or formally accept the risk, preventing unpatched systems from remaining exposed."]