Mongodb Server vulnerabilities

• mongodb server, mongodb, inc. mongodb server +1 more Incorrect authorization in MongoDB Server router for bulk writes to system namespaces CVE-2026-104005 7.1 HighOctober 13, 2026
• mongodb server, mongodb, inc. mongodb server +1 more Collection validators using collation-accepting expressions can crash MongoDB Server on insert CVE-2026-104004 7.1 HighOctober 13, 2026
• mongodb server, mongodb, inc. mongodb server +1 more Fixed values in MongoDB Server $bucket stage may be misread as field references CVE-2026-103965 5.3 MediumOctober 13, 2026
• mongodb server, mongodb, inc. mongodb server +1 more Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Service CVE-2026-96299 7.1 HighOctober 13, 2026
• mongodb server, mongodb, inc. mongodb server +1 more MongoDB Server may disclose process memory via a crafted `$_internalApplyOplogUpdate` aggregation pipeline CVE-2026-96297 6.0 MediumOctober 13, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption CVE-2026-89099 Fix available 7.7 HighSeptember 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Server CVE-2026-82076 Fix available 7.1 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Service CVE-2026-82075 Fix available 8.7 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection Data CVE-2026-82074 Fix available 7.1 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search CVE-2026-82073 Fix available 7.1 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Insufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds Write CVE-2026-82071 Fix available 7.2 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface CVE-2026-82070 Fix available 7.1 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Redaction of Query Literals in MongoDB Server Query Statistics Serialization on Sharded Cluster Router CVE-2026-82069 Fix available 5.1 MediumSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Service CVE-2026-82068 Fix available 7.1 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at Startup CVE-2026-82067 Fix available 9.2 CriticalSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Heap Out-of-Bounds Read in MongoDB Server Query Planning Component CVE-2026-82066 Fix available 5.3 MediumSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata CVE-2026-82065 Fix available 7.1 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members CVE-2026-82064 Fix available 8.7 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Use-After-Free in MongoDB Server Cursor Management Component Leads to Denial of Service CVE-2026-82063 Fix available 6.0 MediumSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypass CVE-2026-82062 Fix available 7.0 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Service CVE-2026-82061 Fix available 7.2 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups CVE-2026-82060 Fix available 2.3 LowSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service CVE-2026-82059 Fix available 6.0 MediumSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service CVE-2026-82058 Fix available 7.1 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Type Confusion in MongoDB Server WiredTiger Storage Engine via Custom Collection Configuration Leads to Persistent Denial of Service CVE-2026-82057 Fix available 7.1 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Race Condition in MongoDB Server Text Index Query Parsing Leads to Heap Use-After-Free and Denial of Service CVE-2026-82056 Fix available 6.0 MediumSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Null Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of Service CVE-2026-82055 Fix available 7.1 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service CVE-2026-82054 Fix available 7.1 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role Assignment CVE-2026-82053 Fix available 7.6 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more $regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars CVE-2026-82052 Fix available 7.1 HighSeptember 8, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification of Other Collections CVE-2026-18712 Fix available 7.2 HighAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Use-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure CVE-2026-18711 Fix available 7.1 HighAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Missing Authorization in MongoDB Sharded Transaction Commit/Abort Handling Leads to Cross-Shard Data Inconsistency CVE-2026-18709 Fix available 5.9 MediumAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Command CVE-2026-18698 Fix available 5.3 MediumAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections CVE-2026-18690 Fix available 7.2 HighAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Input Validation in MongoDB Query Planner Leads to Denial of Service CVE-2026-18699 Fix available 6.0 MediumAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure CVE-2026-18691 Fix available 9.0 CriticalAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic Settings CVE-2026-18702 Fix available 5.3 MediumAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Out-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure CVE-2026-18694 Fix available 7.1 HighAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopes CVE-2026-18708 Fix available 5.3 MediumAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections CVE-2026-18696 Fix available 7.0 HighAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Use-After-Free in MongoDB Geospatial Validation Leads to Denial of Service CVE-2026-18700 Fix available 6.0 MediumAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Type Confusion in MongoDB Query Subsystem Leads to Denial of Service CVE-2026-18701 Fix available 7.1 HighAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos CVE-2026-18697 Fix available 8.7 HighAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Out-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory Disclosure CVE-2026-18693 Fix available 7.2 HighAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Authorization in MongoDB Atlas Vector Search Allows Unauthorized Access to Protected View Data CVE-2026-18705 Fix available 7.1 HighAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Authorization in MongoDB Aggregation Framework Allows Read-Only User to Perform Unauthorized Write Operations CVE-2026-18704 Fix available 7.1 HighAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution CVE-2026-18692 Fix available 7.7 HighAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Out-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory Disclosure CVE-2026-18688 Fix available 7.1 HighAugust 11, 2026
• mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service CVE-2026-18695 Fix available 7.1 HighAugust 11, 2026
• Show olderLoading…