MongoDB security advisory (AV26-1078)

Canadian Centre for Cyber Security Version 1 original current

Imported from official source

Serial number: AV26-1078Date: October 22, 2026 As of October 22, 2026, MongoDB is affected by vulnerabilities in the following product: C# Driver Prior to 3.13.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Memory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserialization Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cache MongoDB Alerts

This version

Version
1 of 1
Recorded
October 23, 2026 14:00
Change
Initial
Content hash
9b669277255cd5a1bca576f6c6631bad
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.