MongoDB pre-auth flaw crashes servers on failover

A critical unauthenticated vulnerability in MongoDB Server (CVE-2026-118383) allows attackers to send two requests that crash the database when it is elected to become the primary server during replica set failover. MongoDB has released patches. Administrators should apply fixes promptly to prevent denial of service attacks targeting replica set infrastructure.