MongoDB CVE-2026-118383 is a critical unauthenticated use-after-free in MongoDB Server. Two requests that need no login can plant a condition that later crashes a replica set member during failover. If your site, shop, or login depends on that database, a clean homepage does not mean the cluster behind it is safe.
