Skip to contentMongodb vulnerabilities
Newest
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreCross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB ServerCVE-2025-14345Fix available2.3 Low
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreMongoDB may be susceptible to Invariant Failure due to batched deleteCVE-2025-13644Fix available7.1 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreMongoDB Server may allow queries to be terminated by unauthorized usersCVE-2025-13643Fix available2.3 Low
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreImproper Certificate Validation May Allow Successful TLS Handshaking Despite Invalid Extended Key Usage Fields in MongoDB ServerCVE-2025-12893Fix available2.3 Low
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreTime-series operations may cause internal BSON size limit to be exceedCVE-2025-13507Fix available7.1 High
- mongodb c driver, php driver +1 moreBulk write with options may read invalid memoryCVE-2025-12119Fix available6.9 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreMalformed KMIP response may result in access violationCVE-2025-12657Fix available5.9 Medium
- mongodb bi connector odbc driverMongoDB BI Connector ODBC driver installation via MSI may leave ACLs unset on custom installation directoriesCVE-2025-121008.8 High
- mongodb atlas sql odbc driverMongoDB Atlas SQL ODBC driver installation via MSI may leave ACLs unset on custom installation directoriesCVE-2025-115758.8 High
- devolutions server, mongodb +1 moreUse-after-free in the MongoDB server query planner may lead to crash or undefined behaviorCVE-2025-11979Fix available5.3 Medium
- mongodb rust driverConfiguration may unexpectedly disable certificate validationCVE-2025-11695Fix available8.0 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMalformed $group Query May Cause MongoDB Server to CrashCVE-2025-10061Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB may be susceptible to Invariant Failure in Transactions due Upsert OperationCVE-2025-10060Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server router will crash when incorrect lsid is set on a sharded queryCVE-2025-10059Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreCertain Queries with Duplicate _id Fields May Cause MongoDB Server to CrashCVE-2025-7259Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreIncorrect Handling of incomplete data may prevent mongoS from Accepting New ConnectionsCVE-2025-6714Fix available7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may be susceptible to privilege escalation due to $mergeCursors stageCVE-2025-6713Public exploitFix available7.7 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may be susceptible to DoS due to Accumulated Memory AllocationCVE-2025-6712Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreIncomplete Redaction of Sensitive Information in MongoDB Server LogsCVE-2025-6711Fix available4.4 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 morePre-authentication Denial of Service Stack Overflow Vulnerability in JSON Parsing via Excessive Recursion in MongoDBCVE-2025-6710Fix available7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 morePre-Authentication Denial of Service Vulnerability in MongoDB Server's OIDC AuthenticationCVE-2025-6709Fix available7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreRace condition in privilege cache invalidation cycleCVE-2025-6707Fix available4.2 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreRunning certain aggregation operations with the SBE engine may lead to unexpected behavior on MongoDB ServerCVE-2025-6706Fix available5.0 Medium
- mongodb bson::xsBSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilitiesCVE-2025-409069.8 Critical
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revokedCVE-2025-3085Fix available8.1 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may crash due to improper validation of explain commandCVE-2025-3084Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMalformed MongoDB wire protocol messages may cause mongos to crashCVE-2025-3083Fix available7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreUser may override a view's collation and gain unauthorized access to underlying dataCVE-2025-3082Fix available3.1 Low
- mongodb libbson, mongodb, mongodb inc server +1 more +3 moreMongoDB C Driver bson library may be susceptible to buffer overflowCVE-2025-0755Fix available8.4 High
- mongodb mongosh, redhat codeready linux builder eus, codeready linux builder for arm64 eus +10 more +12 moreMongoDB Shell may be susceptible to local privilege escalation in WindowsCVE-2025-1756Fix available7.5 High
- mongodb compass, redhat enterprise linux for arm 64, enterprise linux for ibm z systems +2 more +4 moreMongoDB Compass may be susceptible to local privilege escalation in WindowsCVE-2025-17557.5 High
- mongodb mongoshMongoDB Shell may be susceptible to control character Injection via shell outputCVE-2025-1693Fix available3.9 Low
- mongodb mongoshMongoDB Shell may be susceptible to control character injection via pastingCVE-2025-1692Fix available6.3 Medium
- mongodb mongoshMongoDB Shell may be susceptible to Control Character Injection via autocompleteCVE-2025-1691Fix available7.6 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreImproper neutralization of null bytes may lead to buffer over-reads in MongoDB ServerCVE-2024-10921Fix available6.8 Medium
- mongodb mongocryptd, mongo crypt v1.so +1 moreCSFLE and Queryable Encryption self-lookup may fail to encrypt values in subpipelinesCVE-2024-80132.2 Low
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server secondaries may crash due to forced index constraintsCVE-2024-8305Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may access non-initialized region of memory leading to unexpected behaviourCVE-2024-8654Fix available5.0 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server binaries may load potentially insecure shared libraries from specific relative pathsCVE-2024-8207Fix available6.4 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreBackup files may be downloaded by underprivileged users in MongoDB Enterprise ServerCVE-2024-6384Fix available5.3 Medium
- mongodb c driver, mongodb, mongodb php driver +2 more +4 moreAccessing Untrusted Directory May Allow Local Privilege EscalationCVE-2024-7553Fix available7.3 High
- mongodb rust driverAdversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands.CVE-2024-6382Fix available6.4 Medium
- mongodb libbsonMongoDB C Driver bson_strfreev may be susceptible to integer overflowCVE-2024-6381Fix available4.0 Medium
- mongodb compassejson shell parser in MongoDB Compass maybe bypassedCVE-2024-6376Fix available7.0 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMissing authorization check may lead to shard key refinementCVE-2024-6375Fix available5.4 Medium
- mongodb pymongo, debian linux +1 moreOut-of-bounds read in bson module of PyMongoCVE-2024-5629Fix available4.7 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server (mongod) may crash when generating ftdcCVE-2024-3374Fix available5.3 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may have unexpected application behaviour due to invalid BSONCVE-2024-3372Fix available7.5 High
- mongodb compassInsufficient validation of external input in Compass may enable MITM attacksCVE-2024-33717.1 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 more +4 moreMongoDB Server may allow successful untrusted connectionCVE-2024-1351Fix available8.8 High
- Show moreLoading…