As cited
Copy frozen at (site build).
vulnerabilities
MongoDB security advisory (AV26-918)
MongoDB disclosed a vulnerability in MongoDB Server versions prior to 7.0.43, 8.0.32, 8.3.11, 9.0.1, and 9.1.0-rc0 affecting collection validator constants during parsing. The advisory (AV26-918) was issued September 14, 2026, with affected systems identified as of September 11, 2026. Users are advised to apply updates as they become available.
Why it matters: MongoDB Server administrators and organizations running vulnerable versions must patch immediately to prevent exploitation of the collection validator parsing flaw.
- Source published
- First seen by Cybersecurity Tracker