CompaniesMongoDB AtlasMonthly reportsNovember 2026
MongoDB Atlas in November 2026: incidents, uptime and changes
0incidents posted
0labelled major or critical
100%free of major/critical (partial)
100%free of any incident
0price changes
1notable page changes
Vendor-reported outage time 0 min, incident time 0 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
Incidents 0
MongoDB Atlas posted no incidents in November 2026.
Pricing, legal and trust page changes
- Trust page changed Trust / securityTrust page
CVEs published
- CVE-2026-119179 MongoDB Node.js driver: Connection pool desynchronization after operation timeout can expose other user's data (CVSS 7.0)
- CVE-2026-119675 mongorestore may bypass collection guards through a system.buckets prefix (CVSS 8.6)
- CVE-2026-119672 mongofiles may disclose GridFS content to standard output through a stored filename (CVSS 4.8)
- CVE-2026-119673 mongofiles may write outside the working directory through a symlink (CVSS 2.8)
- CVE-2026-119674 mongorestore may restore encoded collection names into an unintended collection (CVSS 3.7)
- CVE-2026-120673 Rust Driver 3.9.1 exports CSFLE plaintext in `db.query.text` before encrypting the command (CVSS 5.5)
- CVE-2026-120678 MongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service) (CVSS 7.5)
- CVE-2026-120684 MongoDB C Driver GridFS gap lets a shared writer recover a protected client's password (CVSS 6.5)
- CVE-2026-120956 remote abort and memory disclosure from a malformed cursor.ns (CVSS 7.1)
- CVE-2026-120955 MongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download_to_stream() Aborts Application on Malformed GridFS Metadata (CVSS 7.5)
- CVE-2026-120954 Silent element-count truncation via 32-bit bit-length overflow in packed-bit vector views (CVSS 3.7)
- CVE-2026-120953 Atlas SQL JDBC Driver <=4.0.0: OIDC discovery endpoints not scheme-validated - attacker-controlled URI dispatched to OS protocol handler (CVSS 4.3)
- CVE-2026-120567 ExecuteUpdate may evaluate caller-supplied values as MongoDB expressions (CVSS 5.4)
- CVE-2026-120952 MongoDB Atlas SQL ODBC Driver writes 48-byte Extended JSON into fixed 16-byte SQL_C_GUID target, causing a 32-byte out-of-bounds write (CVSS 7.1)
- CVE-2026-120959 MongoDB Atlas SQL ODBC Driver uses ignored SQLBindCol BufferLength as fixed-width row-array stride, causing out-of-bounds writes (CVSS 3.7)
Cite this
MongoDB Atlas posted 0 status incidents in November 2026 (0 major or critical); 0 price changes and 1 notable page change observed.
- Title
- MongoDB Atlas in November 2026
- Vendor
- MongoDB Atlas
- Date
- URL
- https://rewindex.com/company/mongodb-atlas/2026/11