MongoDB patches pre-auth crash in replica sets (CVE-2026-118383)
MongoDB fixed a pre-auth use-after-free, CVE-2026-118383 (CVSS 9.5), that lets an unauthenticated client crash a replica set member at the next election. Patch is out for all supported branches.