CompaniesMongoDB AtlasMonthly reportsJuly 2026
MongoDB Atlas in July 2026: incidents, uptime and changes
11incidents posted
2labelled major or critical
99.42%free of major/critical
96.37%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 4 h 18 min, incident time 27 h. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Major 2 · Minor 6 · No impact listed 3
Major and critical incidents 2
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Cluster connectivity issues in Azure westus | Major | 4.1 h | resolved | 07-23 | |
| VoyageAI elevated errors | Major | 11 min | resolved | 07-27 |
Other incidents 9
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| AWS cluster backup and restore operations are failing | No impact listed | 23 min | resolved | 07-02 | |
| Impaired Cluster Operations due to Lets Encrypt Outage | Minor | 1.5 h | resolved | 07-02 | |
| Impaired Cluster Operations due to Lets Encrypt Service Degradation | Minor | 27 min | resolved | 07-02 | |
| Atlas Data Federation and Online Archive cloud-provider IAM authentication error | Minor | 43 min | resolved | 07-09 | |
| Atlas is experiencing issues with issuing certificates from Lets Encrypt | Minor | 19 h | resolved | 07-09 | |
| Atlas Stream Processing is experiencing issues in Azure - West Europe | Minor | 2.1 h | resolved | 07-09 | |
| MongoDB Atlas and Atlas for Government: New AWS Backup and AWS Data Transfer costs will be unavailable between July 17 and 20 | No impact listed | 4 d | resolved | 07-17 | |
| Atlas Stream Processing errors in Azure West Europe | No impact listed | 4.6 h | resolved | 07-29 | |
| Delayed cluster configuration affecting free and flex users | Minor | 42 min | resolved | 07-29 |
CVEs published
- CVE-2026-13078 Local File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader (CVSS 7.7)
- CVE-2026-13077 Out-of-Bounds Heap Read in BSON CodeWScope Element Parsing via Malformed BSONColumn Data (CVSS 7.1)
- CVE-2026-13076 Aggregation Framework Memory Exhaustion Leading to Process Termination (CVSS 6.5)
- CVE-2026-13075 $rankFusion and $scoreFusion Unbounded Memory Allocation During Error Suggestion Generation (CVSS 6.5)
- CVE-2026-13074 Awaitable Hello Command in Exhaust Mode Unthrottled Response Loop Leading to Denial of Service (CVSS 5.3)
- CVE-2026-13073 MongoDB Aggregation Command Invariant Assertion Failure Leading to Process Termination (CVSS 4.3)
- CVE-2026-13072 MongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption (CVSS 8.1)
- CVE-2026-13071 Server-Side JavaScript Aggregation Expression Memory Safety Issue Leading to Process Termination (CVSS 6.5)
- CVE-2026-13070 Improper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Termination (CVSS 5.3)
- CVE-2026-13069 Queryable Encryption FLE2 Find Payload Missing Input Validation Leading to Resource Exhaustion (CVSS 6.5)
- CVE-2026-13068 MongoDB mongos Improper Authorization Check in Cursor Termination Allowing Cross-Database Privilege Misuse (CVSS 4.2)
- CVE-2026-13067 tlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain Socket (CVSS 6.3)
- CVE-2026-13066 Server-Side JavaScript DBPointer BSON Serialization Memory Disclosure (CVSS 6.5)
- CVE-2026-13065 MongoDB $linearFill Window Function Improper Input Validation Leading to Process Termination (CVSS 6.5)
- CVE-2026-13064 MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service (CVSS 6.5)
- CVE-2026-13063 libmongocrypt Improper Input Validation Leading to Process Termination (CVSS 4.3)
- CVE-2026-13062 MongoDB mongos Improper Validation of Internal Flags in Queryable Encryption Write Commands on Sharded Clusters (CVSS 6.5)
- CVE-2026-13061 Improper Access Control Allowing Cross-User Session Metadata Disclosure in $listSessions Aggregation Stage (CVSS 4.3)
- CVE-2026-13060 $graphLookup Aggregation Stage Authorization Check Inconsistency Allowing Unauthorized Collection Access (CVSS 6.5)
- CVE-2026-9737 Find command with $meta sort can lead to crash (CVSS 6.5)
- CVE-2026-13059 Improper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Control Bypass (CVSS 8.1)
- CVE-2026-13058 Transaction Command Insufficient Input Validation Leading to Process Termination (CVSS 6.5)
- CVE-2026-13057 Authorization Bypass via Client-Supplied $search.mergingPipeline Leaks Unauthorized Collection Data Through $$SEARCH_META (CVSS 5.3)
- CVE-2026-13056 A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM (CVSS 6.5)
- CVE-2026-13055 Server crash via aggregation pipeline expression with compound wildcard index specification (CVSS 6.5)
- CVE-2026-14881 Compass connection import allows to override OIDC browser open command (usually set through settings), allowing for arbitrary shell commands execution when connecting to cluster using OIDC auth flow (CVSS 7.8)
Cite this
MongoDB Atlas posted 11 status incidents in July 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- MongoDB Atlas in July 2026
- Vendor
- MongoDB Atlas
- Date
- URL
- https://rewindex.com/company/mongodb-atlas/2026/07