PT-2026-7421 · Unknown+2 · Connections+2

Published 2026-02-10 · Updated 2026-03-11 · CVE-2026-1848

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Connections (affected versions not specified)

Description The system may not accurately count connections received through the proxy port, specifically when a proxy protocol header is present. This can lead to the server exceeding its connection limits and potentially crashing. The issue affects connections accepted from the proxy port only.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2026-03575

BIT-MONGODB-2026-1848

CVE-2026-1848

Affected Products

Connections

Mongodb

Red Os

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2026-1848 · Security Note
• https://osv.dev/vulnerability/BIT-mongodb-2026-1848 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-1848 · Security Note
• https://jira.mongodb.org/browse/SERVER-114695 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-1848 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03575 · Security Note
• https://ubuntu.com/security/CVE-2026-1848 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-1848 · Vendor Advisory
• https://t.me/CVEtracker/44321 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1848 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-mongodb-org-cve-2026-1848-7.3 · Note
• https://redos.red-soft.ru/search/?iblock_id=24&q=CVE-2026-1848 · Note
• https://twitter.com/VulmonFeeds/status/2021355072039375297 · Twitter Post