CompaniesMongoDB AtlasMonthly reportsAugust 2026
MongoDB Atlas in August 2026: incidents, uptime and changes
5incidents posted
2labelled major or critical
98.72%free of major/critical
98.57%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 9 h 28 min, incident time 10 h 34 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Major 2 · Minor 2 · No impact listed 1
Major and critical incidents 2
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Elevated errors on VoyageAI APIs | Major | 2.5 h | resolved | 08-03 | |
| GCP capacity constraints affecting Atlas deployments | Major | 7.0 h | resolved | 08-05 |
Other incidents 3
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Atlas UI and API Periodic Unavailability | Minor | 1.1 h | resolved | 08-18 | |
| Issues rotating certificates for projects containing only Atlas Free and Flex clusters | No impact listed | 25 h | resolved | 08-19 | |
| MongoDB Atlas Log Integration service degraded | Minor | -245 min | resolved | 08-28 |
CVEs published
- CVE-2026-18703 Improper Enforcement of Authentication Mechanism Restrictions in MongoDB Server Allows Use of Disabled Authentication Method (CVSS 4.2)
- CVE-2026-18707 Improper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service (CVSS 4.3)
- CVE-2026-18706 Use-After-Free in MongoDB $graphLookup Aggregation Stage Leads to Denial of Service and Potential Remote Code Execution (CVSS 6.6)
- CVE-2026-18687 Improper Validation in MongoDB Queryable Encryption Maintenance Operation Leads to Denial of Service and Index Corruption (CVSS 7.1)
- CVE-2026-18695 Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service (CVSS 6.5)
- CVE-2026-18688 Out-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory Disclosure (CVSS 7.1)
- CVE-2026-18692 Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution (CVSS 8.8)
- CVE-2026-18704 Improper Authorization in MongoDB Aggregation Framework Allows Read-Only User to Perform Unauthorized Write Operations (CVSS 6.5)
- CVE-2026-18705 Improper Authorization in MongoDB Atlas Vector Search Allows Unauthorized Access to Protected View Data (CVSS 6.5)
- CVE-2026-18693 Out-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory Disclosure (CVSS 7.6)
- CVE-2026-18697 Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos (CVSS 7.5)
- CVE-2026-18701 Type Confusion in MongoDB Query Subsystem Leads to Denial of Service (CVSS 6.5)
- CVE-2026-18700 Use-After-Free in MongoDB Geospatial Validation Leads to Denial of Service (CVSS 6.5)
- CVE-2026-18696 Improper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections (CVSS 6.5)
- CVE-2026-18708 Improper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopes (CVSS 6.4)
- CVE-2026-18694 Out-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure (CVSS 7.1)
- CVE-2026-18702 Improper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic Settings (CVSS 6.4)
- CVE-2026-18691 Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure (CVSS 8.8)
- CVE-2026-18699 Improper Input Validation in MongoDB Query Planner Leads to Denial of Service (CVSS 6.5)
- CVE-2026-18690 Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections (CVSS 8.1)
- CVE-2026-18698 Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Command (CVSS 5.4)
- CVE-2026-18709 Missing Authorization in MongoDB Sharded Transaction Commit/Abort Handling Leads to Cross-Shard Data Inconsistency (CVSS 6.4)
- CVE-2026-18711 Use-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure (CVSS 7.1)
- CVE-2026-18712 Improper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification of Other Collections (CVSS 8.1)
- CVE-2026-18710 Cleartext Storage of Sensitive Information in MongoDB Driver Logging During Client Initialization (CVSS 6.5)
- CVE-2026-19502 Insufficient redaction of sensitive configuration values in diagnostic output of MongoDB SQL Schema Builder CLI (CVSS 5.5)
- CVE-2026-19503 Insufficient OIDC endpoint validation could invoke unintended local protocol handlers (CVSS 4.8)
- CVE-2026-19002 Crafted database metadata may cause memory corruption in MongoDB BI Connector ODBC Driver (CVSS 8.1)
- CVE-2026-19001 MongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object names (CVSS 9.8)
- CVE-2026-18888 MongoDB BI Connector ODBC driver may write outside an allocated buffer when retrieving large floating point values as character data (CVSS 6.5)
- CVE-2026-19004 MongoDB BI Connector ODBC Driver Memory-Safety Issue When Handling Stored Procedure Output Parameters (CVSS 8.1)
- CVE-2026-19003 MongoDB BI Connector ODBC driver may write outside an allocated buffer when the setup dialog opens a data source with oversized path settings (CVSS 7.8)
- CVE-2026-75159 MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination (CVSS 5.9)
- CVE-2026-75573 MongoDB Connector for BI mongodrdl Logs TLS Private-Key Password When Duplicate Options Are Supplied (CVSS 4.4)
- CVE-2026-81521 Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driver (CVSS 6.5)
- CVE-2026-81522 Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ Driver (CVSS 8.1)
- CVE-2026-81523 Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt (CVSS 4.4)
- CVE-2026-81524 Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver (CVSS 5.4)
- CVE-2026-81525 Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver (CVSS 8.1)
- CVE-2026-81526 Cross-database write redirection via unvalidated dotted database name in bulk write namespaces (CVSS 6.5)
- CVE-2026-81527 NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation (CVSS 6.5)
- CVE-2026-81528 NoSQL injection via array replacement bypassing update shape validation in driver write path (CVSS 5.4)
- CVE-2026-81529 Connection-option injection via unescaped settings in the canonical MongoDB URL builder (CVSS 7.1)
- CVE-2026-81530 KMS master key exposure via unredacted credential serialization in driver settings string (CVSS 5.6)
- CVE-2026-76794 MongoDB BI Connector Transition Readiness Report Improper HTML Encoding When Processing Database Metadata (CVSS 4.6)
- CVE-2026-76797 MongoSQL Transition Readiness Tool Improper Neutralization of Formula Elements in Generated Reports (CVSS 6.3)
- CVE-2026-76798 MongoSQL Transition Readiness Tool Improper Output Encoding in Generated HTML Reports (CVSS 6.3)
- CVE-2026-77184 MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE Output (CVSS 5.2)
- CVE-2026-77586 MongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE Output (CVSS 8.0)
- CVE-2026-81490 MongoDB Connector for BI Improper Error Handling During Schema Sampling May Cause Loss of SQL Service (CVSS 7.7)
- CVE-2026-81517 MongoDB Connector for BI Improper Error Handling of Log Write Failures May Cause Loss of SQL Service (CVSS 7.5)
- CVE-2026-81518 BI Connector Optional Client Certificate Verification Allows Unauthenticated Connections (CVSS 7.5)
- CVE-2026-81520 MongoDB Connector for BI Unbounded Authentication Negotiation Leading to Connection Exhaustion (CVSS 7.5)
- CVE-2026-81532 BI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory Corruption (CVSS 8.8)
- CVE-2026-81533 MongoDB BI Connector ODBC Driver Memory-Safety Issue When Parsing Oversized LIMIT Values (CVSS 7.1)
Maintenance 1
Show scheduled maintenance
Cite this
MongoDB Atlas posted 5 status incidents in August 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- MongoDB Atlas in August 2026
- Vendor
- MongoDB Atlas
- Date
- URL
- https://rewindex.com/company/mongodb-atlas/2026/08