STIGQter: STIG Summary: MongoDB Enterprise Advanced 8.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

MongoDB must be a version supported by the vendor.

DISA Rule

SV-279393r1179522_rule

Vulnerability Number

V-279393

Group Title

SRG-APP-001035-DB-000323

Rule Version

MD8X-00-008900

Severity

CAT I

CCI(s)

• CCI-003376 - Replace system components when support for the components is no longer available from the developer, vendor, or manufacturer.

Weight

10

Fix Recommendation

Ensure a license agreement is still in effect and, if so, upgrade to a supported version of MongoDB.

Each major release of MongoDB has upgrade instructions. Follow the upgrade path/procedures for the version and configuration (standalone, replica set, sharded) of MongoDB accordingly.

If the license agreement with MongoDB has lapsed, contact MongoDB to license the use of a supported version.

Check Contents

Review the current version of MongoDB running on the system.

Run the following command from the OS command line and review the "db version" listed in the output:

$ mongod --version | grep "db version"

Compare the version from the output to the supported version matrix here:

https://www.mongodb.com/support-policy/lifecycles

If the version output in the above command has reached its "End of Life Date" shown in the matrix, this is a finding.

Vulnerability Number

V-279393

Documentable

False

Rule Version

MD8X-00-008900

Severity Override Guidance

Review the current version of MongoDB running on the system.

Run the following command from the OS command line and review the "db version" listed in the output:

$ mongod --version | grep "db version"

Compare the version from the output to the supported version matrix here:

https://www.mongodb.com/support-policy/lifecycles

If the version output in the above command has reached its "End of Life Date" shown in the matrix, this is a finding.

Check Content Reference

M

Target Key

5728