PT-2026-122409

CVE-2026-115929

·

Published

2026-10-24

·

Updated

2026-10-24

Description by

CVSS 3.1
6.8
Medium
MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-295: Improper Certificate Validation
Related identifiers
CVE-2026-115929
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com