CVE-2026-120828

A replica-set database server node does not limit or reclaim internal wait records created while handling a client-supplied read option that names a point in time the node will never reach. A party with network access and no credentials can cause these records to accumulate without bound and...

CVE-2026-120828

A replica-set database server node is vulnerable to memory exhaustion due to the lack of limits or reclamation on internal wait records. This occurs when a client provides a read option naming a far-future point in time that the node will never reach. An unauthenticated attacker with network acce...

EUVD-2026-122844

A replica-set database server node does not limit or reclaim internal wait records created while handling a client-supplied read option that names a point in time the node will never reach. A party with network access and no credentials can cause these records to accumulate without bound and...