CVE-2026-115929

LOWCVSS 7.6 · HIGH

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/
https://github.com/mongodb-js/compass/releases/tag/v1.53.1
https://releases.electronjs.org/release/v44.9.1

Weakness type (CWE)

CWE-295

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

SecNews@SecNews_GR20h
MongoDB Compass: Η έκδοση 1.53.1 διορθώνει το CVE-2026-115929 https://www.secnews.gr/743141/mongodb-compass-cve-2026-115929/?fsp_sid=21211
0000095
7.0K followersView on X

Explore more

Back to dashboard