Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of the "authenticate" command that lead to server crash. The authenticate command is accessible to unauthenticated clients, leading to pre-auth denial-of-service in affected product configurations.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-11 | 1 | Patch1 |
| 2026-06-17 | 1 | Disclosure1 |
⚠️ Vulnerabilidades en productos MongoDB ❗ CVE-2026-9753 ❗ CVE-2026-9742 ❗ CVE-2026-9740 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-mongodb-3/ https://t.co/LQbWTtCKWM
Post summary
The post announces three new MongoDB CVEs, linking to external sources for more information but providing no exploitation, patch, or technical details.
🚨 HIGH: CVE-2026-9742 (CVSS 7.5) - Pre-auth DoS in OIDC-enabled configs. Unauthenticated attackers can crash servers via malformed authenticate command. Disable OIDC if not required. #CVE #PatchNow #ThreatIntel https://t.co/bvTFeRMwNk
Post summary
The tweet announces CVE-2026-9742, a high‑severity DoS issue in OIDC‑enabled setups, and recommends disabling OIDC as a mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mongodb | mongodb | - | - | - |