Denial-of-Service Vulnerability in Thinkst Applied Research OpenCanary MongoDB Module
CVE-2026-16551

6.9MEDIUM

Key Information:

Vendor

Thinkst Applied Research

Status
Opencanary
Vendor
CVE Published:
22 July 2026

What is CVE-2026-16551?

A Denial-of-Service vulnerability exists in the Thinkst Applied Research OpenCanary, specifically within its MongoDB module. This issue arises from excessive resource allocation, which can lead to service disruption and unavailability. The vulnerability is present in OpenCanary version 0.9.8, posing a risk to users relying on this monitoring tool for security. It is essential for system administrators to be aware of this issue and apply any available mitigations to ensure the reliability and performance of their cybersecurity measures.

Affected Version(s)

OpenCanary 0.9.8

OpenCanary 0.9.9

References

https://github.com/thinkst/opencanary/security/advisories...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Arkadiusz Marta
.