CVE-2026-16551CWE-20CWE-835

Denial-of-Service in OpenCanary's MongoDB module

Medium · published July 22, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
36.0
In the wild
Unconfirmed
What it is

Denial-of-Service in Thinkst Applied Research OpenCanary (MongoDB module) allows Excessive Allocation.

This issue affects OpenCanary 0.9.8 only.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N
EPSS
0.00428 · 36.0th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2026-07-22T11:22Z
EPSS history
Timeline
  • 22 JUL 11:22Z
    Denial-of-Service in OpenCanary's MongoDB module
    cvelistv5