Where
-Infinity
0

Trending

Last week
Last month
Last year

MongoDB MongoDBImproper Access Control Allowing Cross-User Session Metadata Disclosure in $listSessions Aggregation Stage

Risk 26
Severity
5.3
First published (updated )
CVE-2026-13061

MongoDB ServerMongoDB Server may crash due to improper validation of explain command

Risk 27
Severity
6.5
EPSS
0.04%
First published (updated )
CVE-2025-3084

MongoDB MongoDBMalformed MongoDB wire protocol messages may cause mongos to crash

Risk 31
Severity
7.5
EPSS
0.05%
First published (updated )
CVE-2025-3083

MongoDB ServerUser may override a view's collation and gain unauthorized access to underlying data

Risk 25
Severity
5.4
EPSS
0.03%
First published (updated )
CVE-2025-3082

MongoDB libbsonMongoDB C Driver bson library may be susceptible to buffer overflow

Risk 74
Severity
8.4
First published (updated )
CVE-2025-0755
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

MongoDB Mongocryptd MongodbCSFLE and Queryable Encryption self-lookup may fail to encrypt values in subpipelines

Risk 18
Severity
3.3
First published (updated )
CVE-2024-8013

MongoDB MongoDBMongoDB Server secondaries may crash due to forced index constraints

Risk 27
Severity
6.5
EPSS
0.04%
First published (updated )
CVE-2024-8305

MongoDB ServerMongoDB Server may access non-initialized region of memory leading to unexpected behaviour

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2024-8654

MongoDB MongoDBMongoDB Server binaries may load potentially insecure shared libraries from specific relative paths

Risk 46
Severity
6.7
EPSS
0.04%
First published (updated )
CVE-2024-8207

MongoDB MongoDBBackup files may be downloaded by underprivileged users in MongoDB Enterprise Server

Risk 23
Severity
5.3
EPSS
0.05%
First published (updated )
CVE-2024-6384
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

MongoDB MongoDBAccessing Untrusted Directory May Allow Local Privilege Escalation

Risk 51
Severity
7.8
EPSS
0.04%
First published (updated )
CVE-2024-7553

MongoDB ServerMongoDB Server may allow successful untrusted connection

Risk 86
Severity
9.8
First published (updated )
CVE-2024-1351

npm/mongodbSome MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application

Risk 45
Severity
7.5
First published (updated )
CVE-2021-32050

MongoDB MongoDBCertificate validation issue in MongoDB Server running on Windows or macOS

Risk 43
Severity
7.5
First published (updated )
CVE-2023-1409

MongoDB MongoDBMongoDB Server (mongod) may crash in response to unexpected requests

Risk 38
Severity
6.5
First published (updated )
CVE-2022-24272
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

MongoDB MongoDBLarge aggregation pipelines with a specific stage can crash mongod under default configuration

Risk 43
Severity
7.5
First published (updated )
CVE-2021-32040

MongoDB MongoDBDenial of Service and Data Integrity vulnerability in features command

Risk 48
Severity
7.1
First published (updated )
CVE-2021-32036

MongoDB Mongodb Visual Studio CodeMongoDB Extension for VS Code may unexpectedly store credentials locally in clear text

Risk 32
Severity
5.5
First published (updated )
CVE-2021-32039

MongoDB MongoDBSpecific replication command with malformed oplog entries can crash secondaries

Risk 38
Severity
6.5
First published (updated )
CVE-2021-20330

MongoDB MongoDBServer log entry spoofing via newline injection

Risk 27
Severity
5.3
First published (updated )
CVE-2021-20333
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

MongoDB MongoDBSpecially crafted query may result in a denial of service of mongod

Risk 38
Severity
6.5
First published (updated )
CVE-2021-20326

MongoDB MongoDBInvariant failure when explaining a find with a UUID

Risk 30
Severity
4.9
First published (updated )
CVE-2018-25004

MongoDB MongoDBDenial of service via malformed network packet

Risk 43
Severity
7.5
First published (updated )
CVE-2019-20925

MongoDB MongoDBInfinite loop in aggregation expression

Risk 38
Severity
6.5
First published (updated )
CVE-2018-20803

MongoDB MongoDBImproper neutralization of null byte leads to read overrun

Risk 38
Severity
6.5
First published (updated )
CVE-2020-7928
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

MongoDB MongoDBCrash while handling internal Javascript exception types

Risk 38
Severity
6.5
First published (updated )
CVE-2019-20923

MongoDB MongoDBInvariant in IndexBoundsBuilder

Risk 38
Severity
6.5
First published (updated )
CVE-2019-20924

MongoDB MongoDB$mod can result in undefined behavior

Risk 38
Severity
6.5
First published (updated )
CVE-2019-2392

MongoDB MongoDBInvariant with $elemMatch

Risk 38
Severity
6.5
First published (updated )
CVE-2018-20805

MongoDB MongoDBPost-auth queries on compound index may crash mongod

Risk 38
Severity
6.5
First published (updated )
CVE-2018-20802
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203