Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-16551: OpenCanary MongoDB module causes system slowdowns

CVE-2026-16551 · published 3 months ago

Summary

OpenCanary's MongoDB module has a bug that can cause system slowdowns. This issue only affects OpenCanary version 0.9.8. To stay secure, update to a newer version of OpenCanary as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
thinkst applied research	opencanary	0.9.8

Original advisory text

Denial-of-Service in OpenCanary's MongoDB module

Denial-of-Service in Thinkst Applied Research OpenCanary (MongoDB module) allows Excessive Allocation.

This issue affects OpenCanary 0.9.8 only.

References

https://github.com/thinkst/opencanary/security/advisories/GHSA-vg37-pc42-q265 Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/16xxx/CVE-2026-16551... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-16551 Vendor Advisory
https://github.com/thinkst/opencanary Product

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

8.3 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')

CWE-20Improper Input Validation

Timeline

Published22 Jul 2026

Updated3 Nov 2026

First seen22 Jul 2026

Sources

CVE-2026-16551 · NVD

CVE-2026-16551 · MITRE

CVE-2026-16551 · OSV

GHSA-vg37-pc42-q265 · GHSA

Track software like this

Free during beta