MongoDB DoS Vulnerability Advisory - CVSS 5.3

CERT-Bund published advisory WID-SEC-2026-0920 disclosing CVE details for a MongoDB denial of service vulnerability. The flaw allows a remote, authenticated attacker to trigger DoS conditions in affected MongoDB instances running versions prior to 8.3.0-rc0, 8.2.2, 8.0.18, and 7.0.31 on Linux, UNIX, and Windows systems.

Organizations running affected MongoDB deployments should verify their current versions immediately and apply available patches or mitigations. Priority should be given to production database environments. No specific compliance deadline or regulatory penalty framework is associated with this advisory.