Skip to contentMongodb Inc. Server vulnerabilities
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 morePost-auth null pointer dereference when aggregating against a view with empty search pipelineCVE-2026-8063Fix available7.1 High
- mongodb, mongodb and mongodb server, mongodb inc. server +1 more +3 moreZlib compressed protocol header length confusion may allow memory readCVE-2025-14847In KEVPublic exploitFix availableEPSS 83.2%8.7 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreCross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB ServerCVE-2025-14345Fix available2.3 Low
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreMongoDB may be susceptible to Invariant Failure due to batched deleteCVE-2025-13644Fix available7.1 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreMongoDB Server may allow queries to be terminated by unauthorized usersCVE-2025-13643Fix available2.3 Low
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreImproper Certificate Validation May Allow Successful TLS Handshaking Despite Invalid Extended Key Usage Fields in MongoDB ServerCVE-2025-12893Fix available2.3 Low
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreTime-series operations may cause internal BSON size limit to be exceedCVE-2025-13507Fix available7.1 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreMalformed KMIP response may result in access violationCVE-2025-12657Fix available5.9 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreMongoDB Server (mongod) may crash in response to unexpected requestsCVE-2022-24272Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreLarge aggregation pipelines with a specific stage can crash mongod under default configurationCVE-2021-32040Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreDenial of Service and Data Integrity vulnerability in features commandCVE-2021-32036Fix available5.4 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecific replication command with malformed oplog entries can crash secondariesCVE-2021-20330Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreUser may trigger invariant when allowed to send commands directly to shardsCVE-2021-32037Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreServer log entry spoofing via newline injectionCVE-2021-20333Fix available5.3 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecially crafted query may result in a denial of service of mongodCVE-2021-20326Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInvariant failure when explaining a find with a UUIDCVE-2018-250044.9 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecially crafted regex query can cause DoSCVE-2020-7929Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreDenial of service via malformed network packetCVE-2019-20925Fix available7.5 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInfinite loop in aggregation expressionCVE-2018-208036.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreImproper neutralization of null byte leads to read overrunCVE-2020-7928Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreCrash while joining collections with $lookupCVE-2019-23936.5 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreCrash while handling internal Javascript exception typesCVE-2019-209236.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInvariant in IndexBoundsBuilderCVE-2019-209246.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 more$mod can result in undefined behaviorCVE-2019-23926.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInvariant with $elemMatchCVE-2018-208056.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 morePost-auth queries on compound index may crash mongodCVE-2018-20802Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInvariant failure in applyOpsCVE-2018-208046.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecific query can cause a DoS against MongoDB ServerCVE-2020-7926Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreDenial of Service when processing malformed Role namesCVE-2020-7925Fix available7.5 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecific GeoQuery can cause DoS against MongoDB ServerCVE-2020-7923Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreAdministrative action may disable enforcement of per-user IP whitelistingCVE-2020-7921Fix available4.6 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreProcess termination via PID file manipulationCVE-2019-23895.3 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreCode execution on Windows via OpenSSL engine injectionCVE-2019-23908.2 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreAuthorization session conflationCVE-2019-2386Fix available7.1 High