Threats Tagged 'cve-2026-18691'
View all threats tagged with 'cve-2026-18691'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-18691'
Click on any threat for detailed analysis and mitigation recommendations
A vulnerability in MongoDB Server's intra-cluster connection setup allows an attacker with network access to influence the authentication mechanism used between replica set members. This can lead to the cluster's shared internal credential being transmitted in a less-protected form, potentially exposing it. If the credential is recovered, it could be used to authenticate as the internal superuser on nodes within the deployment. Join the discussion | GCVE Database | 08/11/2026, 21:33:06 UTC Added: 08/12/2026, 16:12:34 UTC |
0 An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica set member connects to another. Under certain conditions, this could cause the cluster's shared internal credential to be transmitted in a less-protected form, potentially allowing that credential to be recovered. If recovered, the credential could be used to authenticate as the internal superuser to nodes in the deployment. Join the discussion | CVE Database V5 | 08/11/2026, 18:46:02 UTC Added: 08/11/2026, 19:12:34 UTC |
Showing 1 to 2 of 2 results