New MongoDB Vulnerability Allows Attackers to Crash Any Server

Back Cyberpress

New MongoDB Vulnerability Allows Attackers to Crash Any Server

Cyberpress • March 5, 2026

Share: View original

This issue affects versions from 3.4 and later with compression enabled by default since 3.6, including MongoDB Atlas setups.nvd. Vulnerability ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical MongoDB Vulnerability Allows Server Crashes by Unauthenticated Attackers A high-severity vulnerability, CVE-2026-25611 (CVSS 7.5), has been identified in MongoDB, enabling unauthenticated attackers to crash exposed servers with minimal bandwidth. This flaw affects all MongoDB versions with compression enabled, including MongoDB Atlas, and over 207,000 instances are currently exposed according to Shodan data. 3 sources 64

Extracted Entities

Platforms (2)

MongoDB MongoDB Atlas