> USN-8160-1: MongoDB vulnerability
[DATE: 09/04/2026 13:11]
[LANGUAGE: EN]
It was discovered that MongoDB incorrectly handled length parameters
in zlib-compressed network messages prior to authentication. An
unauthenticated remote attacker could possibly use this issue to
cause MongoDB to allocate an oversized memory buffer, resulting
in the exposure of sensitive information.