Latest vulnerabilities for "mongodb mongodb server"

MongoDB MongoDB ServerImproper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Termination

Risk 35

Severity

6

First published (updated )

CVE-2026-13070

MongoDB MongoDB ServerLocal File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader

Risk 44

Severity

6.3

First published (updated )

CVE-2026-13078

MongoDB MongoDBPost-authentication use-after-free in server-side JavaScript BSON-to-array conversion

Risk 79

Severity

8.7

First published (updated )

CVE-2026-11933

MongoDB MongoDBUnbounded recursion in BSONColumn interleaved-reference causes pre-auth stack overflow

Risk 33

Severity

8.7

EPSS

0.34%

First published (updated )

CVE-2026-9740

MongoDB MongoDB ServerKeyfile contents are in MongoDB Server logs

Risk 27

Severity

6.8

EPSS

0.12%

First published (updated )

CVE-2026-9735

MongoDB MongoDBStack memory disclosure in filemd5 command

Risk 29

Severity

7.1

EPSS

0.22%

First published (updated )

CVE-2026-9754

MongoDB MongoDBServer crash via malformed binary diff passed to $_internalApplyOplogUpdate.

Risk 43

Severity

7.2

EPSS

0.30%

First published (updated )

CVE-2026-9753

MongoDB MongoDBGeometryCollection with strict-winding polygon causes server crash during 2dsphere index key generation

Risk 29

Severity

7.1

EPSS

0.27%

First published (updated )

CVE-2026-9752

MongoDB MongoDBSensitive data could be written to mongod.log

Risk 27

Severity

6.8

EPSS

0.11%

First published (updated )

CVE-2026-9751

MongoDB MongoDBMetadata name collision on $-prefixed fields causes post-auth server crash

Risk 29

Severity

7.1

EPSS

0.37%

First published (updated )

CVE-2026-9750

MongoDB MongoDB$_internalConvertBucketIndexStats may crash the mongod server when working on no timeseries input

Risk 29

Severity

7.1

EPSS

0.32%

First published (updated )

CVE-2026-9748

MongoDB MongoDBCrafted cross-shard merge aggregation crashes MongoDB Server

Risk 29

Severity

7.1

EPSS

0.27%

First published (updated )

CVE-2026-9747

MongoDB MongoDBServer crashes in case of the use of exchange

Risk 29

Severity

7.1

EPSS

0.27%

First published (updated )

CVE-2026-9746

MongoDB MongoDB ServerAggregation sub-pipeline null dereference may allow DoS via crafted getMore

Risk 29

Severity

7.1

EPSS

0.31%

First published (updated )

CVE-2026-9743

MongoDB MongoDBAuthenticate command with specific mechanism parameter can trigger server crash

Risk 31

Severity

8.2

EPSS

0.35%

First published (updated )

CVE-2026-9742

MongoDB MongoDB ServerCalling createIndex with certain index types can crash mongod

Risk 29

Severity

7.1

EPSS

0.24%

First published (updated )

CVE-2026-8843

MongoDB MongoDBPost-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators

Risk 27

Severity

5.3

EPSS

0.05%

First published (updated )

CVE-2026-8202

MongoDB MongoDBPost-authentication use-after-free error in $_internalJsEmit and mapreduce commands

Risk 51

Severity

7.7

EPSS

0.26%

First published (updated )

CVE-2026-8336

MongoDB MongoDBSchema validation log messages may not redact user data

Risk 19

Severity

4.8

EPSS

0.04%

First published (updated )

CVE-2026-8200

MongoDB MongoDBPost-auth memory exhaustion via bitwise match expressions

Risk 29

Severity

7.1

EPSS

0.05%

First published (updated )

CVE-2026-8199

MongoDB MongoDBFlatBSON Duplicate Field Index Drift

Risk 56

Severity

8.7

EPSS

0.07%

First published (updated )

CVE-2026-8053

MongoDB MongoDB ServerPost-auth null pointer dereference when aggregating against a view with empty search pipeline

Risk 29

Severity

7.1

EPSS

0.04%

First published (updated )

CVE-2026-8063

MongoDB MongoDBMD5 checksum creation may cause availability loss

Risk 31

Severity

7.1

EPSS

0.04%

First published (updated )

CVE-2026-6914

MongoDB MongoDBMemory safety issues in slot-based execution hash table spill

Risk 37

Severity

6.1

EPSS

0.08%

First published (updated )

CVE-2026-4358

MongoDB MongoDBExpressionContext use-after-free in classic engine $lookup and $graphLookup aggregation operators

Risk 56

Severity

8.8

EPSS

0.05%

First published (updated )

CVE-2026-4148

MongoDB MongoDBStack memory disclosure in filemd5 command

Risk 29

Severity

7.1

EPSS

0.03%

First published (updated )

CVE-2026-4147

MongoDB MongoDBMongod can run out of stack memory when expressions create deeply nested documents

Risk 43

Severity

7.5

First published (updated )

CVE-2026-1849

MongoDB MongoDBMongoDB Server may crash when inserting large documents

Risk 43

Severity

7.5

First published (updated )

CVE-2026-1847

MongoDB MongoDB ServerInternal ResourceId collision may affect unrelated collections

Risk 29

Severity

7.1

EPSS

0.04%

First published (updated )

CVE-2026-25612

MongoDB MongoDB ServerPre-Authentication Memory Exhaustion Denial of Service in MongoDB Server

Risk 33

Severity

8.7

EPSS

0.05%

First published (updated )

CVE-2026-25611

Trending

MongoDB MongoDB ServerImproper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Termination

MongoDB MongoDB ServerLocal File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader

MongoDB MongoDBPost-authentication use-after-free in server-side JavaScript BSON-to-array conversion

MongoDB MongoDBUnbounded recursion in BSONColumn interleaved-reference causes pre-auth stack overflow

MongoDB MongoDB ServerKeyfile contents are in MongoDB Server logs

Don't miss critical vulnerabilities

MongoDB MongoDBStack memory disclosure in filemd5 command

MongoDB MongoDBServer crash via malformed binary diff passed to $_internalApplyOplogUpdate.

MongoDB MongoDBGeometryCollection with strict-winding polygon causes server crash during 2dsphere index key generation

MongoDB MongoDBSensitive data could be written to mongod.log

MongoDB MongoDBMetadata name collision on $-prefixed fields causes post-auth server crash

Don't miss critical vulnerabilities

MongoDB MongoDB$_internalConvertBucketIndexStats may crash the mongod server when working on no timeseries input

MongoDB MongoDBCrafted cross-shard merge aggregation crashes MongoDB Server

MongoDB MongoDBServer crashes in case of the use of exchange

MongoDB MongoDB ServerAggregation sub-pipeline null dereference may allow DoS via crafted getMore

MongoDB MongoDBAuthenticate command with specific mechanism parameter can trigger server crash

Don't miss critical vulnerabilities

MongoDB MongoDB ServerCalling createIndex with certain index types can crash mongod

MongoDB MongoDBPost-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators

MongoDB MongoDBPost-authentication use-after-free error in $_internalJsEmit and mapreduce commands

MongoDB MongoDBSchema validation log messages may not redact user data

MongoDB MongoDBPost-auth memory exhaustion via bitwise match expressions

Don't miss critical vulnerabilities

MongoDB MongoDBFlatBSON Duplicate Field Index Drift

MongoDB MongoDB ServerPost-auth null pointer dereference when aggregating against a view with empty search pipeline

MongoDB MongoDBMD5 checksum creation may cause availability loss

MongoDB MongoDBMemory safety issues in slot-based execution hash table spill

MongoDB MongoDBExpressionContext use-after-free in classic engine $lookup and $graphLookup aggregation operators

Don't miss critical vulnerabilities

MongoDB MongoDBStack memory disclosure in filemd5 command

MongoDB MongoDBMongod can run out of stack memory when expressions create deeply nested documents

MongoDB MongoDBMongoDB Server may crash when inserting large documents

MongoDB MongoDB ServerInternal ResourceId collision may affect unrelated collections

MongoDB MongoDB ServerPre-Authentication Memory Exhaustion Denial of Service in MongoDB Server

Don't miss critical vulnerabilities

Company

Resources

Contact