Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover
Source: The Hacker News ·
A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trigger a crash on the database server. The crash occurs only if that server is later chosen to take over as the main server while it still lacks some recent changes. MongoDB, the company that makes the database, released fixed versions earlier this week. The affected servers are members of a replica
Frequently Asked Questions
What is Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover?
Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover is a article discovery curated from The Hacker News. A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trigger a crash on the database server. The crash occurs only if that server is…
How can I access or experience this?
You can experience this content directly on its original host (The Hacker News) by clicking the "Open Original" button.
Where does this content come from?
Curated from The Hacker News by the OnSuggest team to surface the most interesting and serendipitous content on the web.
More like this
All Technology discoveries →Cursor Says Stolen Fireworks AI Key Led to Trojanized Claude Code Extension Incident
The compromise of Anthropic's official Claude Code extension on Cursor's extension marketplace was the result of the theft of an access key that was exposed in the wake of a breach targeting Fireworks AI. "An attacker obtained an access key we had issued to Fireworks," Cursor said in a Friday update. "The key was exposed by Fireworks, and the attacker used it to copy data from a read-only
Last Week on My Mac: Eggs, baskets and resilience
Do individual families and others need to improve their resilience to service failure? Maybe it's the services on which we rely that have lost their resilience. Ideas for making your Mac and work less vulnerable to failure.
Did Alice Huang's Megaspeed Bypass America's Controls on Exporting Nvidia Chip to China?
In three years "Megaspeed International" went from from inactive Chinese gaming subsidiary "to one of Asia's biggest buyers of cutting-edge semiconductors from the US," reports CNN. "It is incredibly hard to look at this and not see a Chinese state-sponsored network for bypassing US export control networks," trade data investigator William George told CNN. As Nvidia's Jensen Huang had an affair with Megaspeed executive Alice Huang, "Megaspeed quietly instilled billions of dollars of Nvidia chips in data centers across Southeast Asia," CNN writes, noting scrutiny of the company from the Singapo
Italy Fines Meta €805m Over Accessing Android Users' Photos with Facebook App
The Associated Press reports: Italy announced an €805 million ($887 million) fine against Meta on Saturday for using photos and videos from Android users' galleries on Facebook without specific consent or adequate disclosure... Investigators found that the feature was enabled by default and that Facebook requested gallery access through a single permission covering multiple app functions with different purposes. The authority gave Meta 60 days to disable the feature and seek separate consent for its use. Italy has about 20 million Android users, notes the BBC, and this fine "is among the
Wordle today: Answer, hints for November 15, 2026
Here's the answer for "Wordle" #1975 on November 15 as well as a few hints, tips, and clues to help you solve it yourself.
NYT Strands hints, answers for November 15, 2026
The NYT Strands hints and answers you need to make the most of your puzzling experience.