Skip to contentMongodb vulnerabilities
Newest
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreInsufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted MetadataCVE-2026-82065Fix available7.1 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUnauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set MembersCVE-2026-82064Fix available8.7 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUse-After-Free in MongoDB Server Cursor Management Component Leads to Denial of ServiceCVE-2026-82063Fix available6.0 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreImproper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate BypassCVE-2026-82062Fix available7.0 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUse-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of ServiceCVE-2026-82061Fix available7.2 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreInsufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image LookupsCVE-2026-82060Fix available2.3 Low
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreImproper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of ServiceCVE-2026-82059Fix available6.0 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUnhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of ServiceCVE-2026-82058Fix available7.1 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreType Confusion in MongoDB Server WiredTiger Storage Engine via Custom Collection Configuration Leads to Persistent Denial of ServiceCVE-2026-82057Fix available7.1 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreRace Condition in MongoDB Server Text Index Query Parsing Leads to Heap Use-After-Free and Denial of ServiceCVE-2026-82056Fix available6.0 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreNull Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of ServiceCVE-2026-82055Fix available7.1 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of ServiceCVE-2026-82054Fix available7.1 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreImproper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role AssignmentCVE-2026-82053Fix available7.6 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 more$regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 charsCVE-2026-82052Fix available7.1 High
- mongodb php driverHeap out-of-bounds read via corrupt nested BSON in field path error messageCVE-2026-84968Fix available6.9 Medium
- mongodb, mongodb for vs code +1 moreArbitrary command execution via shell-expanded connection string in Launch MongoDB Shell terminalCVE-2026-84967Fix available5.1 Medium
- mongodb libmongocryptAuthenticated KMS request forgery via CRLF injection in GCP key identifier stringsCVE-2026-84962Fix available5.7 Medium
- mongodb c driverSilent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parserCVE-2026-84963Fix available6.3 Medium
- mongodb c driverHeap corruption via OCSP request double free from crafted multi-URL certificate in TLS clientCVE-2026-84964Fix available8.2 High
- mongodb c driverHeap write primitive via size round-up wrap during JSON parsing on 32-bit buildsCVE-2026-84965Fix available5.9 Medium
- mongodb c++ driver, c\+\+ driver +1 moreBSON element injection via NUL-embedded document keys in builder appendCVE-2026-84966Fix available5.9 Medium
- mongodb c driverHeap overflow via truncated base64 encoding of binary fields in length-limited JSON outputCVE-2026-84969Fix available6.3 Medium
- mongodb libmongocryptPersistent client crash loop via undersized FLE2 insert-update ciphertext in decryption pathCVE-2026-84971Fix available7.1 High
- mongodb c++ driver, c\+\+ driver +1 moreHeap over-read or silent misparse via 32-bit truncation of JSON length in BSON JSON parserCVE-2026-84970Fix available5.9 Medium
- mongodb bi connector odbc driverMongoDB BI Connector ODBC Driver Memory-Safety Issue When Parsing Oversized LIMIT ValuesCVE-2026-815336.0 Medium
- mongodb bi connector odbc driverBI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory CorruptionCVE-2026-815328.7 High
- mongodb bi connectorMongoDB Connector for BI Unbounded Authentication Negotiation Leading to Connection ExhaustionCVE-2026-815208.7 High
- mongodb bi connectorBI Connector Optional Client Certificate Verification Allows Unauthenticated ConnectionsCVE-2026-815188.7 High
- mongodb bi connectorMongoDB Connector for BI Improper Error Handling of Log Write Failures May Cause Loss of SQL ServiceCVE-2026-815178.7 High
- mongodb bi connectorMongoDB Connector for BI Improper Error Handling During Schema Sampling May Cause Loss of SQL ServiceCVE-2026-814908.3 High
- mongodb bi connectorMongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE OutputCVE-2026-775868.5 High
- mongodb bi connectorMongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE OutputCVE-2026-771845.6 Medium
- mongodb mongosql transition readiness tool, bi connector transition readiness report +1 moreMongoSQL Transition Readiness Tool Improper Output Encoding in Generated HTML ReportsCVE-2026-767986.9 Medium
- mongodb mongosql transition readiness tool, bi connector transition readiness report +1 moreMongoSQL Transition Readiness Tool Improper Neutralization of Formula Elements in Generated ReportsCVE-2026-767975.8 Medium
- mongodb bi connector transition readiness report, mongosql transition readiness tool +1 moreMongoDB BI Connector Transition Readiness Report Improper HTML Encoding When Processing Database MetadataCVE-2026-767944.8 Medium
- mongodb c# driver, c\# driver +1 moreKMS master key exposure via unredacted credential serialization in driver settings stringCVE-2026-815306.8 Medium
- mongodb c# driver, c\# driver +1 moreConnection-option injection via unescaped settings in the canonical MongoDB URL builderCVE-2026-815297.1 High
- mongodb c# driver, c\# driver +1 moreNoSQL injection via array replacement bypassing update shape validation in driver write pathCVE-2026-815285.3 Medium
- mongodb c# driver, c\# driver +1 moreNoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translationCVE-2026-815276.9 Medium
- mongodb rust driverCross-database write redirection via unvalidated dotted database name in bulk write namespacesCVE-2026-815267.1 High
- mongodb php driver, php extension, php library +2 moreCross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP DriverCVE-2026-81525Fix available8.6 High
- mongodb c driverCross-tenant database retargeting via dot/NUL injection in namespace strings in the C DriverCVE-2026-81524Fix available5.3 Medium
- mongodb libmongocryptCross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocryptCVE-2026-81523Fix available2.0 Low
- mongodb c++ driver, c\+\+ driver +1 moreCross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ DriverCVE-2026-81522Fix available8.6 High
- mongodb go driverCross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go DriverCVE-2026-815217.1 High
- mongodb bi connectorMongoDB Connector for BI mongodrdl Logs TLS Private-Key Password When Duplicate Options Are SuppliedCVE-2026-755734.1 Medium
- mongodb bi connectorMongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process TerminationCVE-2026-751598.2 High
- mongodb bi connector odbc driverMongoDB BI Connector ODBC driver may write outside an allocated buffer when the setup dialog opens a data source with oversized path settingsCVE-2026-190038.4 High
- mongodb bi connector odbc driverMongoDB BI Connector ODBC Driver Memory-Safety Issue When Handling Stored Procedure Output ParametersCVE-2026-190048.8 High
- mongodb bi connector odbc driverMongoDB BI Connector ODBC driver may write outside an allocated buffer when retrieving large floating point values as character dataCVE-2026-188887.1 High
- Show moreLoading…