Threats Tagged 'cwe-1088'
View all threats tagged with 'cwe-1088'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cwe-1088'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-81520: CWE-1088: Synchronous Access of Remote Resource without Timeout in MongoDB BI ConnectorCVE-2026-81520 0 A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session open indefinitely by beginning a SASL-based login exchange and then declining to complete it. Because the negotiation loop had no overall time bound and the read from the client had no deadline, each such session retains a worker, a client connection slot, and its associated backend database connections until the process is restarted. Repeated use of this behavior can consume the configured connection capacity and prevent legitimate users from establishing new sessions. Join the discussion | CVE Database V5 | 08/28/2026, 20:22:42 UTC Added: 08/28/2026, 22:08:09 UTC |
Showing 1 to 1 of 1 result