Cato CTRL’s senior security researcher Vitaly Simonovich has uncovered a​ CVE-2026-25611 is rooted in MongoDB’s OP_COMPRESSED wire protocol, a compression feature introduced in version 3.4 and enabled by default since version 3.6. The flaw is classified under CWE-405 (Asymmetric Resource Consumption), carrying a CVSS 4.0 score of 8.7 and a CVSS 3.1 score of 7.5 (High). It affects all MongoDB […]

The post New MongoDB Vulnerability Allows Attackers to Crash Servers, Exposing Critical Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.