Skip to contentMongodb Inc Server vulnerabilities
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMemory safety issues in slot-based execution hash table spillCVE-2026-4358Fix available6.1 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreExpressionContext use-after-free in classic engine $lookup and $graphLookup aggregation operatorsCVE-2026-4148Fix available8.7 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreStack memory disclosure in filemd5 commandCVE-2026-4147Fix available7.1 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreAn unsafe cast in the MongoDB query planner can result in a segmentation fault.CVE-2026-25613Fix available7.1 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongod can run out of stack memory when expressions create deeply nested documentsCVE-2026-1849Fix available7.1 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreAn authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplificationCVE-2026-1850Fix available7.1 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreprofile command may permit unauthorized configurationCVE-2026-25609Fix available5.3 Medium
- mongodb inc server, mongodb, mongodb, inc. mongodb server +2 moreInvalid $geoNear index hint may cause server crashCVE-2026-25610Fix available7.1 High
- mongodb inc server, mongodb, mongodb, inc. mongodb server +2 moreConnections received from the proxy port may not count towards total accepted connectionsCVE-2026-1848Fix available8.2 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may crash when inserting large documentsCVE-2026-1847Fix available7.1 High
- mongodb inc server, mongodb, inc. mongodb server +1 moreInternal ResourceId collision may affect unrelated collectionsCVE-2026-256127.1 High
- mongodb inc server, mongodb, inc. mongodb server +1 morePre-Authentication Memory Exhaustion Denial of Service in MongoDB ServerCVE-2026-256118.7 High
- mongodb inc server, mongodb, inc. mongodb server +1 moreMongoDB Windows installation MSI may leave ACLs unset on custom installation directoriesCVE-2025-104917.8 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMalformed $group Query May Cause MongoDB Server to CrashCVE-2025-10061Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB may be susceptible to Invariant Failure in Transactions due Upsert OperationCVE-2025-10060Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server router will crash when incorrect lsid is set on a sharded queryCVE-2025-10059Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreCertain Queries with Duplicate _id Fields May Cause MongoDB Server to CrashCVE-2025-7259Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreIncorrect Handling of incomplete data may prevent mongoS from Accepting New ConnectionsCVE-2025-6714Fix available7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may be susceptible to privilege escalation due to $mergeCursors stageCVE-2025-6713Public exploitFix available7.7 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may be susceptible to DoS due to Accumulated Memory AllocationCVE-2025-6712Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreIncomplete Redaction of Sensitive Information in MongoDB Server LogsCVE-2025-6711Fix available4.4 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 morePre-authentication Denial of Service Stack Overflow Vulnerability in JSON Parsing via Excessive Recursion in MongoDBCVE-2025-6710Fix available7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 morePre-Authentication Denial of Service Vulnerability in MongoDB Server's OIDC AuthenticationCVE-2025-6709Fix available7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreRace condition in privilege cache invalidation cycleCVE-2025-6707Fix available4.2 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreRunning certain aggregation operations with the SBE engine may lead to unexpected behavior on MongoDB ServerCVE-2025-6706Fix available5.0 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revokedCVE-2025-3085Fix available8.1 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may crash due to improper validation of explain commandCVE-2025-3084Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMalformed MongoDB wire protocol messages may cause mongos to crashCVE-2025-3083Fix available7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreUser may override a view's collation and gain unauthorized access to underlying dataCVE-2025-3082Fix available3.1 Low
- mongodb libbson, mongodb, mongodb inc server +1 more +3 moreMongoDB C Driver bson library may be susceptible to buffer overflowCVE-2025-0755Fix available8.4 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreImproper neutralization of null bytes may lead to buffer over-reads in MongoDB ServerCVE-2024-10921Fix available6.8 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server secondaries may crash due to forced index constraintsCVE-2024-8305Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may access non-initialized region of memory leading to unexpected behaviourCVE-2024-8654Fix available5.0 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server binaries may load potentially insecure shared libraries from specific relative pathsCVE-2024-8207Fix available6.4 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreBackup files may be downloaded by underprivileged users in MongoDB Enterprise ServerCVE-2024-6384Fix available5.3 Medium
- mongodb c driver, mongodb, mongodb php driver +2 more +4 moreAccessing Untrusted Directory May Allow Local Privilege EscalationCVE-2024-7553Fix available7.3 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMissing authorization check may lead to shard key refinementCVE-2024-6375Fix available5.4 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server (mongod) may crash when generating ftdcCVE-2024-3374Fix available5.3 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may have unexpected application behaviour due to invalid BSONCVE-2024-3372Fix available7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 more +4 moreMongoDB Server may allow successful untrusted connectionCVE-2024-1351Fix available8.8 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreCertificate validation issue in MongoDB Server running on Windows or macOSCVE-2023-1409Fix available5.3 Medium