STIGQter STIGQter: STIG Summary: MongoDB Enterprise Advanced 7.x Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

MongoDB products must be a supported version.

DISA Rule

SV-265952r1138543_rule

Vulnerability Number

V-265952

Group Title

SRG-APP-000456-DB-000400

Rule Version

MD7X-00-009300

Severity

CAT I

CCI(s)

Weight

10

Fix Recommendation

Ensure a license agreement is still in effect and, if so, upgrade to a supported version of MongoDB.

Each major release of MongoDB has upgrade instructions. Follow the upgrade path/procedures for the version and configuration (standalone, replica set, sharded) of MongoDB accordingly.

If the license agreement with MongoDB has lapsed, contact MongoDB to license the use of a supported version.

Check Contents

Review the current version of MongoDB running on the system.

Run the following command from the OS command line and review the "db version" listed in the output:

$ mongod --version | grep "db version"

Compare the version from the output to the supported version matrix here:

https://www.mongodb.com/support-policy/lifecycles

If the version output in the above command has reached its "End of Life Date" shown in the matrix, this is a finding.

Vulnerability Number

V-265952

Documentable

False

Rule Version

MD7X-00-009300

Severity Override Guidance

Review the current version of MongoDB running on the system.

Run the following command from the OS command line and review the "db version" listed in the output:

$ mongod --version | grep "db version"

Compare the version from the output to the supported version matrix here:

https://www.mongodb.com/support-policy/lifecycles

If the version output in the above command has reached its "End of Life Date" shown in the matrix, this is a finding.

Check Content Reference

M

Target Key

5637