CVE-2026-1848

HIGH

7.5

Descricao

Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header.

Detalhes CVE

Pontuacao CVSS v3.17.5

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado2/10/2026

Ultima modificacao2/25/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

mongodb:mongodb

Fraquezas (CWE)

CWE-770

Referencias

https://jira.mongodb.org/browse/SERVER-114695(cna@mongodb.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.