Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how mongodb compares to other vendors in security performance

View Risk Score →

Software

mongodb mongodb
73
mongodb mongodb server
48
mongodb
47
mongodb server
7
mongodb ops manager
5
mongodb c driver
4
mongodb c driver mongodb
4
mongodb compass
4
mongodb mongod
4
mongodb mongodb c driver
4
mongodb bson
3
mongodb rust driver
3
mongodb c# driver
2
mongodb js-bson
2
mongodb libbson
2
mongodb mongos
2
mongodb php driver
2
mongodb rust driver mongodb
2
mongodb atlas kubernetes operator
1
mongodb atlas search
1
mongodb atlas sql odbc driver
1
mongodb bi connector odbc driver
1
mongodb bson node.js
1
mongodb bson ruby
1
mongodb bson::xs
1
mongodb connector for bi
1
mongodb database tools
1
mongodb go driver mongodb
1
mongodb java driver mongodb
1
mongodb libmongocrypt
1
mongodb libmongocrypt node.js
1
mongodb mongo-express
1
mongodb mongocryptd
1
mongodb mongodb and mongodb server
1
mongodb mongodb drivers (queryable encryption / client-side field level encryption)
1
mongodb mongodb enterprise kubernetes operator
1
mongodb mongodb server 7.0
1
mongodb mongodb server 8.0
1
mongodb mongodb server 8.2
1
mongodb mongodb server-side javascript engine
1
mongodb mongomirror
1
mongodb node.js driver
1
mongodb ops manager server
1
mongodb php driver mongodb
1
mongodb pymongo
1
mongodb queryable encryption (fle2)
1
mongodb swift driver
1
mongodb/mongodb
1

MongoDB mongodServer crash via aggregation pipeline expression with compound wildcard index specification

Risk 40
Severity
7.1
First published (updated )
CVE-2026-13055

MongoDB Atlas SearchAuthorization Bypass via Client-Supplied $search.mergingPipeline Leaks Unauthorized Collection Data Through $$SEARCH_META

Risk 35
Severity
6
First published (updated )
CVE-2026-13057

MongoDB mongodTransaction Command Insufficient Input Validation Leading to Process Termination

Risk 40
Severity
7.1
First published (updated )
CVE-2026-13058

MongoDB MongoDBFind command with $meta sort can lead to crash

Risk 29
Severity
7.1
EPSS
0.24%
First published (updated )
CVE-2026-9737

MongoDB mongosMongoDB mongos Improper Validation of Internal Flags in Queryable Encryption Write Commands on Sharded Clusters

Risk 40
Severity
7.1
First published (updated )
CVE-2026-13062
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

MongoDB libmongocryptlibmongocrypt Improper Input Validation Leading to Process Termination

Risk 26
Severity
5.3
First published (updated )
CVE-2026-13063

MongoDB MongoDBMongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service

Risk 40
Severity
7.1
First published (updated )
CVE-2026-13064

MongoDB MongoDBMongoDB $linearFill Window Function Improper Input Validation Leading to Process Termination

Risk 40
Severity
7.1
First published (updated )
CVE-2026-13065

MongoDB MongoDB Server-side JavaScript engineServer-Side JavaScript DBPointer BSON Serialization Memory Disclosure

Risk 40
Severity
7.1
First published (updated )
CVE-2026-13066

MongoDB MongoDBtlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain Socket

Risk 51
Severity
7.2
First published (updated )
CVE-2026-13067
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

MongoDB mongosMongoDB mongos Improper Authorization Check in Cursor Termination Allowing Cross-Database Privilege Misuse

Risk 29
Severity
2.3
First published (updated )
CVE-2026-13068

MongoDB Queryable Encryption (FLE2)Queryable Encryption FLE2 Find Payload Missing Input Validation Leading to Resource Exhaustion

Risk 40
Severity
7.1
First published (updated )
CVE-2026-13069

MongoDB MongoDB ServerImproper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Termination

Risk 35
Severity
6
First published (updated )
CVE-2026-13070

MongoDB mongodMongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption

Risk 76
Severity
9.2
First published (updated )
CVE-2026-13072

MongoDB MongoDBMongoDB Aggregation Command Invariant Assertion Failure Leading to Process Termination

Risk 26
Severity
5.3
First published (updated )
CVE-2026-13073
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

MongoDB MongoDBAwaitable Hello Command in Exhaust Mode Unthrottled Response Loop Leading to Denial of Service

Risk 33
Severity
6.9
First published (updated )
CVE-2026-13074

MongoDB mongod$rankFusion and $scoreFusion Unbounded Memory Allocation During Error Suggestion Generation

Risk 40
Severity
7.1
First published (updated )
CVE-2026-13075

MongoDB BSONOut-of-Bounds Heap Read in BSON CodeWScope Element Parsing via Malformed BSONColumn Data

Risk 49
Severity
7.1
First published (updated )
CVE-2026-13077

MongoDB MongoDB ServerLocal File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader

Risk 44
Severity
6.3
First published (updated )
CVE-2026-13078

MongoDB MongoDBPost-authentication use-after-free in server-side JavaScript BSON-to-array conversion

Risk 79
Severity
8.7
First published (updated )
CVE-2026-11933
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

MongoDB MongoDBUnbounded recursion in BSONColumn interleaved-reference causes pre-auth stack overflow

Risk 33
Severity
8.7
EPSS
0.34%
First published (updated )
CVE-2026-9740

MongoDB MongoDB ServerKeyfile contents are in MongoDB Server logs

Risk 27
Severity
6.8
EPSS
0.12%
First published (updated )
CVE-2026-9735

MongoDB MongoDBStack memory disclosure in filemd5 command

Risk 29
Severity
7.1
EPSS
0.22%
First published (updated )
CVE-2026-9754

MongoDB MongoDBServer crash via malformed binary diff passed to $_internalApplyOplogUpdate.

Risk 43
Severity
7.2
EPSS
0.30%
First published (updated )
CVE-2026-9753

MongoDB MongoDBGeometryCollection with strict-winding polygon causes server crash during 2dsphere index key generation

Risk 29
Severity
7.1
EPSS
0.27%
First published (updated )
CVE-2026-9752
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

MongoDB MongoDBSensitive data could be written to mongod.log

Risk 27
Severity
6.8
EPSS
0.11%
First published (updated )
CVE-2026-9751

MongoDB MongoDBMetadata name collision on $-prefixed fields causes post-auth server crash

Risk 29
Severity
7.1
EPSS
0.37%
First published (updated )
CVE-2026-9750

MongoDB MongoDBUsing MaxKey() may crash the server

Risk 29
Severity
7.1
EPSS
0.27%
First published (updated )
CVE-2026-9749

MongoDB MongoDB$_internalConvertBucketIndexStats may crash the mongod server when working on no timeseries input

Risk 29
Severity
7.1
EPSS
0.32%
First published (updated )
CVE-2026-9748

MongoDB MongoDBCrafted cross-shard merge aggregation crashes MongoDB Server

Risk 29
Severity
7.1
EPSS
0.27%
First published (updated )
CVE-2026-9747
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203