CVE-2026-6915

• MongoDB/Mongoinferred
• MongoDB/MongoDB

  cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*

  Range: >=7.0.0,<7.0.32

No patches discovered yet.

AI mechanics synthesis has not run for this CVE yet.

• jira.mongodb.org/browse/SERVER-119679nvdIssue TrackingPatch

• Worm rubs out competitor's malware, then takes control
  The Register Security · May 8, 2026
• The Good, the Bad and the Ugly in Cybersecurity – Week 19
  SentinelOne Labs · May 8, 2026
• ‘PCPJack’ Worm Removes TeamPCP Infections, Steals Credentials
  SecurityWeek · May 8, 2026
• New PCPJack worm steals credentials, cleans TeamPCP infections
  BleepingComputer · May 7, 2026
• PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems
  The Hacker News · May 7, 2026
• VECT: Ransomware by design, Wiper by accident
  Check Point Research · Apr 28, 2026
• Ongoing supply-chain attack 'explicitly targeting' security, dev tools
  The Register Security · Apr 27, 2026
• Ongoing supply-chain attack 'explicitly targeting' security, dev tools
  The Register Security · Apr 27, 2026
• Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 Attack
  The Hacker News · Apr 27, 2026