# MongoDB Atlas in November 2026: incidents, uptime and changes

> MongoDB Atlas in November 2026: 0 incidents on its status page (0 major or critical), 100% free of major or critical incidents (vendor-reported), 1 pricing/legal/trust page change, 15 CVEs. From Rewindex’s archive of MongoDB Atlas’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/mongodb-atlas/2026/11
Last updated: 2026-11-05T14:36:00Z

- Incidents posted: 0 (major/critical: 0) · Maintenance: 0
- By vendor impact label: none
- Uptime (vendor-reported): 100% free of major/critical incidents, 100% free of any incident; outage time 0 min, incident time 0 min (partial month)
- Price changes: 0 · Pricing/legal/trust page changes: 1 · Deprecations: 0 · CVEs: 15
- Previous month: [October 2026](https://rewindex.com/company/mongodb-atlas/2026/10.md) · Next: none · [All months](https://rewindex.com/company/mongodb-atlas/reports.md) · [MongoDB Atlas](https://rewindex.com/company/mongodb-atlas.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

_No incidents posted this month._

## Pricing, legal and trust page changes

- 2026-11-04 08:44 UTC: [Trust page changed](https://rewindex.com/change/p14523.md) (Trust / security: Trust page)

## CVEs published

- [CVE-2026-119179](https://rewindex.com/cve/CVE-2026-119179.md) MongoDB Node.js driver: Connection pool desynchronization after operation timeout can expose other user's data (CVSS 7.0), published 2026-11-03
- [CVE-2026-119675](https://rewindex.com/cve/CVE-2026-119675.md) mongorestore may bypass collection guards through a system.buckets prefix (CVSS 8.6), published 2026-11-03
- [CVE-2026-119672](https://rewindex.com/cve/CVE-2026-119672.md) mongofiles may disclose GridFS content to standard output through a stored filename (CVSS 4.8), published 2026-11-03
- [CVE-2026-119673](https://rewindex.com/cve/CVE-2026-119673.md) mongofiles may write outside the working directory through a symlink (CVSS 2.8), published 2026-11-03
- [CVE-2026-119674](https://rewindex.com/cve/CVE-2026-119674.md) mongorestore may restore encoded collection names into an unintended collection (CVSS 3.7), published 2026-11-03
- [CVE-2026-120673](https://rewindex.com/cve/CVE-2026-120673.md) Rust Driver 3.9.1 exports CSFLE plaintext in \`db.query.text\` before encrypting the command (CVSS 5.5), published 2026-11-03
- [CVE-2026-120678](https://rewindex.com/cve/CVE-2026-120678.md) MongoDB C Driver leaks the decompressed reply buffer when an OP\_COMPRESSED reply fails to parse (denial of service) (CVSS 7.5), published 2026-11-03
- [CVE-2026-120684](https://rewindex.com/cve/CVE-2026-120684.md) MongoDB C Driver GridFS gap lets a shared writer recover a protected client's password (CVSS 6.5), published 2026-11-03
- [CVE-2026-120956](https://rewindex.com/cve/CVE-2026-120956.md) remote abort and memory disclosure from a malformed cursor.ns (CVSS 7.1), published 2026-11-03
- [CVE-2026-120955](https://rewindex.com/cve/CVE-2026-120955.md) MongoDB C Driver Modern GridFS mongoc\_gridfs\_bucket\_download\_to\_stream() Aborts Application on Malformed GridFS Metadata (CVSS 7.5), published 2026-11-03
- [CVE-2026-120954](https://rewindex.com/cve/CVE-2026-120954.md) Silent element-count truncation via 32-bit bit-length overflow in packed-bit vector views (CVSS 3.7), published 2026-11-03
- [CVE-2026-120953](https://rewindex.com/cve/CVE-2026-120953.md) Atlas SQL JDBC Driver \<=4.0.0: OIDC discovery endpoints not scheme-validated - attacker-controlled URI dispatched to OS protocol handler (CVSS 4.3), published 2026-11-03
- [CVE-2026-120567](https://rewindex.com/cve/CVE-2026-120567.md) ExecuteUpdate may evaluate caller-supplied values as MongoDB expressions (CVSS 5.4), published 2026-11-03
- [CVE-2026-120952](https://rewindex.com/cve/CVE-2026-120952.md) MongoDB Atlas SQL ODBC Driver writes 48-byte Extended JSON into fixed 16-byte SQL\_C\_GUID target, causing a 32-byte out-of-bounds write (CVSS 7.1), published 2026-11-03
- [CVE-2026-120959](https://rewindex.com/cve/CVE-2026-120959.md) MongoDB Atlas SQL ODBC Driver uses ignored SQLBindCol BufferLength as fixed-width row-array stride, causing out-of-bounds writes (CVSS 3.7), published 2026-11-03

## Cite this

MongoDB Atlas posted 0 status incidents in November 2026 (0 major or critical); 0 price changes and 1 notable page change observed.

- Canonical URL: https://rewindex.com/company/mongodb-atlas/2026/11
- Citation: MongoDB Atlas, “MongoDB Atlas in November 2026” (2026-11-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/mongodb-atlas/2026/11 (CC BY 4.0).
- Markdown link: `[MongoDB Atlas: MongoDB Atlas in November 2026 (2026-11-01)](https://rewindex.com/company/mongodb-atlas/2026/11)`


---
Canonical: https://rewindex.com/company/mongodb-atlas/2026/11 · Markdown: https://rewindex.com/company/mongodb-atlas/2026/11.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T15:29:02.154Z