vulnerability
FreeBSD: VID-c11e0878-d6a8-11f0-8e1b-b42e991fc52e (CVE-2025-14345): MongoDB Server -- Improper Locking
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:M/Au:S/C:P/I:P/A:N) | Dec 11, 2025 | Jan 27, 2026 | Jan 27, 2026 |
Severity
5
CVSS
(AV:N/AC:M/Au:S/C:P/I:P/A:N)
Published
Dec 11, 2025
Added
Jan 27, 2026
Modified
Jan 27, 2026
Description
https://jira.mongodb.org/browse/SERVER-106075 reports: A post-authenticationflaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific conditions which are not predictable and exist for a very short period of time. This error can cause the transaction coordination logic to misinterpret the transaction as committed, resulting in inconsistent state on those shards. This may lead to low integrity and availability impact.
Solution
freebsd-upgrade-package-mongodb70
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.