CVE-2026-1848 — Allocation of Resources Without Limits or Throttling in INC Mongodb Server
Severity
8.2HIGHNVD
EPSS
0.1%
top 81.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 10
Description
Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header.
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Packages2 packages
🔴Vulnerability Details
3GHSA▶
GHSA-wv25-wjh7-whjh: Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connecti↗2026-02-10
OSV▶
CVE-2026-1848: Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connecti↗2026-02-10
CVEList▶
Connections received from the proxy port may not count towards total accepted connections↗2026-02-10