CVE Watch29 sept 2026

CVE-2026-81520

A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session open indefinitely by be

CVSS

7.5

Alto

EPSS

0.4%

p36

KEV

—

Exploit Today

0-100

Publicado: 28 ago 2026 · Última mod.: 29 sept 2026 · CWE-1088

EPSS · 30d

0.4%EPSS · 30 días0.4%

2026-09-272026-10-25

Descripción técnica

A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session open indefinitely by beginning a SASL-based login exchange and then declining to complete it. Because the negotiation loop had no overall time bound and the read from the client had no deadline, each such session retains a worker, a client connection slot, and its associated backend database connections until the process is restarted. Repeated use of this behavior can consume the configured connection capacity and prevent legitimate users from establishing new sessions.

Referencias oficiales

www.mongodb.comhttps://www.mongodb.com/docs/bi-connector/current/release-notes/

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1036497.5 ALT

19.1%

——6Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery (denial of service). The server set its socket timeouts in the form Windows takes, which Linux refuses, and its HTTPS clients read without a deadline, so a peer that accepts a connection and then sends nothing held the waiting thread for as long as the connection stayed open. The MTA-STS policy fetch, enabled by default, is made during outbound delivery to mta-sts.<recipient domain>, so anyone who can make the server deliver mail to a domain they control - for example as the envelope sender of a message that bounces - can hold delivery threads until outbound delivery stops. The same flaw affects the DANE TLSA query, the OAuth2 token request, the ACME client, and the ManageSieve and metrics listeners, which a silent client stops from serving anyone else. Windows builds are not affected.18d CVE-2026-891477.5 ALT

41.6%

——12Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the single-threaded snmpd main loop to block indefinitely and suspend all SNMP processing.32d