Latest vulnerabilities for "mongodb mongodb server"

MongoDB MongoDB ServerImproper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification of Other Collections

Risk 60

Severity

7.2

First published (updated )

CVE-2026-18712

MongoDB MongoDB ServerUse-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure

Risk 49

Severity

7.1

First published (updated )

CVE-2026-18711

MongoDB MongoDB ServerMissing Authorization in MongoDB Sharded Transaction Commit/Abort Handling Leads to Cross-Shard Data Inconsistency

Risk 49

Severity

5.9

First published (updated )

CVE-2026-18709

MongoDB MongoDB ServerImproper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Command

Risk 34

Severity

5.3

First published (updated )

CVE-2026-18698

MongoDB MongoDB ServerImproper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections

Risk 60

Severity

7.2

First published (updated )

CVE-2026-18690

MongoDB MongoDB ServerImproper Input Validation in MongoDB Query Planner Leads to Denial of Service

Risk 38

Severity

6

First published (updated )

CVE-2026-18699

MongoDB MongoDB ServerImproper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure

Risk 76

Severity

9

First published (updated )

CVE-2026-18691

MongoDB MongoDB ServerImproper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic Settings

Risk 39

Severity

5.3

First published (updated )

CVE-2026-18702

MongoDB MongoDB ServerOut-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure

Risk 49

Severity

7.1

First published (updated )

CVE-2026-18694

MongoDB MongoDB ServerImproper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopes

Risk 39

Severity

5.3

First published (updated )

CVE-2026-18708

MongoDB MongoDB ServerImproper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections

Risk 52

Severity

7

First published (updated )

CVE-2026-18696

MongoDB MongoDB ServerUse-After-Free in MongoDB Geospatial Validation Leads to Denial of Service

Risk 38

Severity

6

First published (updated )

CVE-2026-18700

MongoDB MongoDB ServerType Confusion in MongoDB Query Subsystem Leads to Denial of Service

Risk 40

Severity

7.1

First published (updated )

CVE-2026-18701

MongoDB MongoDB ServerOut-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory Disclosure

Risk 58

Severity

7.2

First published (updated )

CVE-2026-18693

MongoDB MongoDB ServerImproper Authorization in MongoDB Aggregation Framework Allows Read-Only User to Perform Unauthorized Write Operations

Risk 40

Severity

7.1

First published (updated )

CVE-2026-18704

MongoDB MongoDB ServerUse-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution

Risk 79

Severity

7.7

First published (updated )

CVE-2026-18692

MongoDB MongoDB ServerOut-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory Disclosure

Risk 49

Severity

7.1

First published (updated )

CVE-2026-18688

MongoDB MongoDB ServerImproper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service

Risk 40

Severity

7.1

First published (updated )

CVE-2026-18695

MongoDB MongoDB ServerImproper Validation in MongoDB Queryable Encryption Maintenance Operation Leads to Denial of Service and Index Corruption

Risk 49

Severity

7.1

First published (updated )

CVE-2026-18687

MongoDB MongoDB ServerUse-After-Free in MongoDB $graphLookup Aggregation Stage Leads to Denial of Service and Potential Remote Code Execution

Risk 63

Severity

7.5

First published (updated )

CVE-2026-18706

MongoDB MongoDB ServerImproper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service

Risk 26

Severity

5.3

First published (updated )

CVE-2026-18707

MongoDB MongoDB ServerImproper Enforcement of Authentication Mechanism Restrictions in MongoDB Server Allows Use of Disabled Authentication Method

Risk 29

Severity

2.3

First published (updated )

CVE-2026-18703

MongoDB MongoDBImproper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Termination

Risk 35

Severity

6

First published (updated )

CVE-2026-13070

MongoDB MongoDB ServerLocal File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader

Risk 44

Severity

6.3

First published (updated )

CVE-2026-13078

MongoDB MongoDBPost-authentication use-after-free in server-side JavaScript BSON-to-array conversion

Risk 79

Severity

8.7

First published (updated )

CVE-2026-11933

MongoDB MongoDBUnbounded recursion in BSONColumn interleaved-reference causes pre-auth stack overflow

Risk 33

Severity

8.7

EPSS

0.34%

First published (updated )

CVE-2026-9740

MongoDB MongoDB ServerKeyfile contents are in MongoDB Server logs

Risk 27

Severity

6.8

EPSS

0.12%

First published (updated )

CVE-2026-9735

MongoDB MongoDBStack memory disclosure in filemd5 command

Risk 29

Severity

7.1

EPSS

0.22%

First published (updated )

CVE-2026-9754

MongoDB MongoDBServer crash via malformed binary diff passed to $_internalApplyOplogUpdate.

Risk 43

Severity

7.2

EPSS

0.30%

First published (updated )

CVE-2026-9753

MongoDB MongoDBGeometryCollection with strict-winding polygon causes server crash during 2dsphere index key generation

Risk 29

Severity

7.1

EPSS

0.27%

First published (updated )

CVE-2026-9752

Trending

MongoDB MongoDB ServerImproper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification of Other Collections

MongoDB MongoDB ServerUse-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure

MongoDB MongoDB ServerMissing Authorization in MongoDB Sharded Transaction Commit/Abort Handling Leads to Cross-Shard Data Inconsistency

MongoDB MongoDB ServerImproper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Command

MongoDB MongoDB ServerImproper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections

Don't miss critical vulnerabilities

MongoDB MongoDB ServerImproper Input Validation in MongoDB Query Planner Leads to Denial of Service

MongoDB MongoDB ServerImproper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure

MongoDB MongoDB ServerImproper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic Settings

MongoDB MongoDB ServerOut-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure

MongoDB MongoDB ServerImproper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopes

Don't miss critical vulnerabilities

MongoDB MongoDB ServerImproper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections

MongoDB MongoDB ServerUse-After-Free in MongoDB Geospatial Validation Leads to Denial of Service

MongoDB MongoDB ServerType Confusion in MongoDB Query Subsystem Leads to Denial of Service

MongoDB MongoDB ServerOut-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory Disclosure

MongoDB MongoDB ServerImproper Authorization in MongoDB Aggregation Framework Allows Read-Only User to Perform Unauthorized Write Operations

Don't miss critical vulnerabilities

MongoDB MongoDB ServerUse-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution

MongoDB MongoDB ServerOut-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory Disclosure

MongoDB MongoDB ServerImproper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service

MongoDB MongoDB ServerImproper Validation in MongoDB Queryable Encryption Maintenance Operation Leads to Denial of Service and Index Corruption

MongoDB MongoDB ServerUse-After-Free in MongoDB $graphLookup Aggregation Stage Leads to Denial of Service and Potential Remote Code Execution

Don't miss critical vulnerabilities

MongoDB MongoDB ServerImproper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service

MongoDB MongoDB ServerImproper Enforcement of Authentication Mechanism Restrictions in MongoDB Server Allows Use of Disabled Authentication Method

MongoDB MongoDBImproper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Termination

MongoDB MongoDB ServerLocal File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader

MongoDB MongoDBPost-authentication use-after-free in server-side JavaScript BSON-to-array conversion

Don't miss critical vulnerabilities

MongoDB MongoDBUnbounded recursion in BSONColumn interleaved-reference causes pre-auth stack overflow

MongoDB MongoDB ServerKeyfile contents are in MongoDB Server logs

MongoDB MongoDBStack memory disclosure in filemd5 command

MongoDB MongoDBServer crash via malformed binary diff passed to $_internalApplyOplogUpdate.

MongoDB MongoDBGeometryCollection with strict-winding polygon causes server crash during 2dsphere index key generation

Don't miss critical vulnerabilities

Company

Resources

Contact