CVE-2026-119179

Published 3 November 2026 · tracked since 3 November 2026

Description

A flaw in the connection management layer of the MongoDB Node.js driver can leave a pooled network connection in the pool for reuse while data from an earlier operation is still outstanding on it. In applications that enable an optional client-side operation timeout, an unauthenticated party that ca

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-121443 MEDIUM 5.3
• CVE-2026-121444 HIGH 7.5
• CVE-2026-121435 MEDIUM 4.3
• CVE-2026-121436 HIGH 7.2
• CVE-2026-121417 HIGH 7.8
• CVE-2026-121392 HIGH 7.4
• CVE-2026-118527 MEDIUM 4.3
• CVE-2026-106991 HIGH 7.1
• CVE-2026-119742 HIGH 7.2
• CVE-2026-99270 HIGH 8.1

→ Open the live CVE board · all tools