Latest vulnerabilities for vendor "mongodb"

Where

Sort:

Software

mongodb mongodb

mongodb mongodb server

mongodb

mongodb server

mongodb ops manager

mongodb bi connector odbc driver

mongodb c driver

mongodb c driver mongodb

mongodb compass

mongodb mongod

mongodb mongodb c driver

mongodb rust driver mongodb

mongodb atlas kubernetes operator

mongodb atlas search

mongodb atlas sql odbc driver

mongodb bson node.js

mongodb bson ruby

mongodb bson::xs

mongodb connector for bi

mongodb database tools

mongodb go driver mongodb

mongodb java driver mongodb

mongodb libmongocrypt

mongodb libmongocrypt node.js

mongodb mongo-express

mongodb mongocryptd

mongodb mongodb and mongodb server

mongodb mongodb atlas vector search

mongodb mongodb drivers (queryable encryption / client-side field level encryption)

mongodb mongodb enterprise kubernetes operator

mongodb mongodb server 7.0

mongodb mongodb server 8.0

mongodb mongodb server 8.2

mongodb mongodb server mongos

mongodb mongodb server-side javascript engine

mongodb mongodb sql schema builder cli

mongodb mongomirror

mongodb node.js driver

mongodb ops manager server

mongodb php driver mongodb

mongodb pymongo

mongodb queryable encryption (fle2)

mongodb swift driver

MongoDB BI Connector ODBC driverMongoDB BI Connector ODBC Driver Memory-Safety Issue When Handling Stored Procedure Output Parameters

Risk 72

Severity

8.8

First published (updated )

CVE-2026-19004

MongoDB BI Connector ODBC driverMongoDB BI Connector ODBC driver may write outside an allocated buffer when retrieving large floating point values as character data

Risk 40

Severity

7.1

First published (updated )

CVE-2026-18888

MongoDB BI Connector ODBC driverMongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object names

Risk 86

Severity

9.5

First published (updated )

CVE-2026-19001

MongoDB MongoDB SQL Schema Builder CLIInsufficient redaction of sensitive configuration values in diagnostic output of MongoDB SQL Schema Builder CLI

Risk 37

Severity

6.8

First published (updated )

CVE-2026-19502

MongoDB MongoDB ServerImproper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification of Other Collections

Risk 60

Severity

7.2

First published (updated )

CVE-2026-18712

MongoDB MongoDB ServerUse-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure

Risk 49

Severity

7.1

First published (updated )

CVE-2026-18711

MongoDB MongoDB ServerMissing Authorization in MongoDB Sharded Transaction Commit/Abort Handling Leads to Cross-Shard Data Inconsistency

Risk 49

Severity

5.9

First published (updated )

CVE-2026-18709

MongoDB MongoDB ServerImproper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Command

Risk 34

Severity

5.3

First published (updated )

CVE-2026-18698

MongoDB MongoDB ServerImproper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections

Risk 60

Severity

7.2

First published (updated )

CVE-2026-18690

MongoDB MongoDB ServerImproper Input Validation in MongoDB Query Planner Leads to Denial of Service

Risk 38

Severity

First published (updated )

CVE-2026-18699

MongoDB MongoDB ServerImproper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure

Risk 76

Severity

First published (updated )

CVE-2026-18691

MongoDB MongoDB ServerImproper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic Settings

Risk 39

Severity

5.3

First published (updated )

CVE-2026-18702

MongoDB MongoDB ServerOut-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure

Risk 49

Severity

7.1

First published (updated )

CVE-2026-18694

MongoDB MongoDB ServerImproper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopes

Risk 39

Severity

5.3

First published (updated )

CVE-2026-18708

MongoDB MongoDB ServerImproper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections

Risk 52

Severity

First published (updated )

CVE-2026-18696

MongoDB MongoDB ServerUse-After-Free in MongoDB Geospatial Validation Leads to Denial of Service

Risk 38

Severity

First published (updated )

CVE-2026-18700

MongoDB MongoDB ServerType Confusion in MongoDB Query Subsystem Leads to Denial of Service

Risk 40

Severity

7.1

First published (updated )

CVE-2026-18701

MongoDB MongoDB Server mongosImproper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos

Risk 47

Severity

8.7

First published (updated )

CVE-2026-18697

MongoDB MongoDB ServerOut-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory Disclosure

Risk 58

Severity

7.2

First published (updated )

CVE-2026-18693

MongoDB MongoDB Atlas Vector SearchImproper Authorization in MongoDB Atlas Vector Search Allows Unauthorized Access to Protected View Data

Risk 40

Severity

7.1

First published (updated )

CVE-2026-18705

MongoDB MongoDB ServerImproper Authorization in MongoDB Aggregation Framework Allows Read-Only User to Perform Unauthorized Write Operations

Risk 40

Severity

7.1

First published (updated )

CVE-2026-18704

MongoDB MongoDB ServerUse-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution

Risk 79

Severity

7.7

First published (updated )

CVE-2026-18692

MongoDB MongoDB ServerOut-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory Disclosure

Risk 49

Severity

7.1

First published (updated )

CVE-2026-18688

MongoDB MongoDB ServerImproper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service

Risk 40

Severity

7.1

First published (updated )

CVE-2026-18695

MongoDB MongoDB ServerImproper Validation in MongoDB Queryable Encryption Maintenance Operation Leads to Denial of Service and Index Corruption

Risk 49

Severity

7.1

First published (updated )

CVE-2026-18687

MongoDB MongoDB ServerUse-After-Free in MongoDB $graphLookup Aggregation Stage Leads to Denial of Service and Potential Remote Code Execution

Risk 63

Severity

7.5

First published (updated )

CVE-2026-18706

MongoDB MongoDB ServerImproper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service

Risk 26

Severity

5.3

First published (updated )

CVE-2026-18707

MongoDB MongoDB ServerImproper Enforcement of Authentication Mechanism Restrictions in MongoDB Server Allows Use of Disabled Authentication Method

Risk 29

Severity

2.3

First published (updated )

CVE-2026-18703

MongoDB MongoDBServer crash via aggregation pipeline expression with compound wildcard index specification

Risk 40

Severity

7.1

First published (updated )

CVE-2026-13055

MongoDB MongoDBA user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM

Risk 40

Severity

7.1

First published (updated )

CVE-2026-13056

Trending

Vendor Risk Score

Software

MongoDB BI Connector ODBC driverMongoDB BI Connector ODBC Driver Memory-Safety Issue When Handling Stored Procedure Output Parameters

MongoDB BI Connector ODBC driverMongoDB BI Connector ODBC driver may write outside an allocated buffer when retrieving large floating point values as character data

MongoDB BI Connector ODBC driverMongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object names

MongoDB MongoDB SQL Schema Builder CLIInsufficient redaction of sensitive configuration values in diagnostic output of MongoDB SQL Schema Builder CLI

MongoDB MongoDB ServerImproper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification of Other Collections

Don't miss critical vulnerabilities

MongoDB MongoDB ServerUse-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure

MongoDB MongoDB ServerMissing Authorization in MongoDB Sharded Transaction Commit/Abort Handling Leads to Cross-Shard Data Inconsistency

MongoDB MongoDB ServerImproper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Command

MongoDB MongoDB ServerImproper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections

MongoDB MongoDB ServerImproper Input Validation in MongoDB Query Planner Leads to Denial of Service

Don't miss critical vulnerabilities

MongoDB MongoDB ServerImproper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure

MongoDB MongoDB ServerImproper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic Settings

MongoDB MongoDB ServerOut-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure

MongoDB MongoDB ServerImproper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopes

MongoDB MongoDB ServerImproper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections

Don't miss critical vulnerabilities

MongoDB MongoDB ServerUse-After-Free in MongoDB Geospatial Validation Leads to Denial of Service

MongoDB MongoDB ServerType Confusion in MongoDB Query Subsystem Leads to Denial of Service

MongoDB MongoDB Server mongosImproper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos

MongoDB MongoDB ServerOut-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory Disclosure

MongoDB MongoDB Atlas Vector SearchImproper Authorization in MongoDB Atlas Vector Search Allows Unauthorized Access to Protected View Data

Don't miss critical vulnerabilities

MongoDB MongoDB ServerImproper Authorization in MongoDB Aggregation Framework Allows Read-Only User to Perform Unauthorized Write Operations

MongoDB MongoDB ServerUse-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution

MongoDB MongoDB ServerOut-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory Disclosure

MongoDB MongoDB ServerImproper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service

MongoDB MongoDB ServerImproper Validation in MongoDB Queryable Encryption Maintenance Operation Leads to Denial of Service and Index Corruption

Don't miss critical vulnerabilities

MongoDB MongoDB ServerUse-After-Free in MongoDB $graphLookup Aggregation Stage Leads to Denial of Service and Potential Remote Code Execution

MongoDB MongoDB ServerImproper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service

MongoDB MongoDB ServerImproper Enforcement of Authentication Mechanism Restrictions in MongoDB Server Allows Use of Disabled Authentication Method

MongoDB MongoDBServer crash via aggregation pipeline expression with compound wildcard index specification

MongoDB MongoDBA user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM

Don't miss critical vulnerabilities

Company

Resources

Contact