Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-18692 |
|
An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated...
An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated...
|
| CVE-2026-18691 |
|
An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable...
An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable...
|
| CVE-2026-13072 |
|
Vulnerability in mongodb (CVE-2026-13072)
vulnerability in mongodb (CVE-2026-13072). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13071 |
|
Use-After-Free in mongodb (CVE-2026-13071)
vulnerability in mongodb (CVE-2026-13071). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13070 |
|
Vulnerability in mongodb (CVE-2026-13070)
vulnerability in mongodb (CVE-2026-13070). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13075 |
|
Vulnerability in mongodb (CVE-2026-13075)
vulnerability in mongodb (CVE-2026-13075). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13078 |
|
Vulnerability in mongodb (CVE-2026-13078)
vulnerability in mongodb (CVE-2026-13078). Confidential information can be exposed externally.
|
| CVE-2026-13077 |
|
Out-of-Bounds Read in mongodb (CVE-2026-13077)
vulnerability in mongodb (CVE-2026-13077). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13073 |
|
Vulnerability in dos (CVE-2026-13073)
vulnerability in dos (CVE-2026-13073). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13076 |
|
Vulnerability in mongodb (CVE-2026-13076)
vulnerability in mongodb (CVE-2026-13076). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13074 |
|
Vulnerability in mongodb (CVE-2026-13074)
vulnerability in mongodb (CVE-2026-13074). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13065 |
|
Vulnerability in dos (CVE-2026-13065)
vulnerability in dos (CVE-2026-13065). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13057 |
|
Vulnerability in mongodb (CVE-2026-13057)
vulnerability in mongodb (CVE-2026-13057). Confidential information can be exposed externally.
|
| CVE-2026-13068 |
|
Authorization Flaw in mongodb (CVE-2026-13068)
vulnerability in mongodb (CVE-2026-13068). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13063 |
|
Vulnerability in mongodb (CVE-2026-13063)
vulnerability in mongodb (CVE-2026-13063). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13062 |
|
Vulnerability in mongodb (CVE-2026-13062)
vulnerability in mongodb (CVE-2026-13062). Data can be tampered with by attackers.
|
| CVE-2026-13058 |
|
Vulnerability in dos (CVE-2026-13058)
vulnerability in dos (CVE-2026-13058). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13069 |
|
Vulnerability in mongodb (CVE-2026-13069)
vulnerability in mongodb (CVE-2026-13069). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13056 |
|
Vulnerability in mongodb (CVE-2026-13056)
vulnerability in mongodb (CVE-2026-13056). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13066 |
|
Vulnerability in mongodb (CVE-2026-13066)
vulnerability in mongodb (CVE-2026-13066). Confidential information can be exposed externally.
|
| CVE-2026-13061 |
|
Authorization Flaw in mongodb (CVE-2026-13061)
vulnerability in mongodb (CVE-2026-13061). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13064 |
|
Vulnerability in mongodb (CVE-2026-13064)
vulnerability in mongodb (CVE-2026-13064). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13067 |
|
Authorization Flaw in mongodb (CVE-2026-13067)
vulnerability in mongodb (CVE-2026-13067). Confidential information can be exposed externally.
|
| CVE-2026-13060 |
|
Authorization Flaw in mongodb (CVE-2026-13060)
vulnerability in mongodb (CVE-2026-13060). Confidential information can be exposed externally.
|
| CVE-2026-13059 |
|
Vulnerability in mongodb (CVE-2026-13059)
vulnerability in mongodb (CVE-2026-13059). Confidential information can be exposed externally.
|
| CVE-2026-13055 |
|
Vulnerability in mongodb (CVE-2026-13055)
vulnerability in mongodb (CVE-2026-13055). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11933 |
|
Post-authentication use-after-free in server-side JavaScript BSON-to-array conversion
Post-authentication use-after-free in server-side JavaScript BSON-to-array conversion
|
| CVE-2026-9754 |
|
Vulnerability in mongodb (CVE-2026-9754)
vulnerability in mongodb (CVE-2026-9754). Confidential information can be exposed externally. Mitigation: upgrade to `8.2.10, 8.3.3` or later.
|
| CVE-2026-9753 |
|
Vulnerability in mongodb (CVE-2026-9753)
vulnerability in mongodb (CVE-2026-9753). Confidential information can be exposed externally. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
|
| CVE-2026-9749 |
|
Vulnerability in mongodb (CVE-2026-9749)
vulnerability in mongodb (CVE-2026-9749). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
|
| CVE-2026-9747 |
|
Vulnerability in mongodb (CVE-2026-9747)
vulnerability in mongodb (CVE-2026-9747). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
|
| CVE-2026-9741 |
|
Vulnerability in mongodb (CVE-2026-9741)
vulnerability in mongodb (CVE-2026-9741). Confidential information can be exposed externally. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
|
| CVE-2026-9750 |
|
Vulnerability in mongodb (CVE-2026-9750)
vulnerability in mongodb (CVE-2026-9750). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
|
| CVE-2026-9752 |
|
Vulnerability in mongodb (CVE-2026-9752)
vulnerability in mongodb (CVE-2026-9752). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
|
| CVE-2026-9748 |
|
Vulnerability in mongodb (CVE-2026-9748)
vulnerability in mongodb (CVE-2026-9748). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.35, 8.0.10, 8.2.10, 8.3.3` or later.
|
| CVE-2026-9751 |
|
Vulnerability in mongodb (CVE-2026-9751)
vulnerability in mongodb (CVE-2026-9751). Confidential information can be exposed externally. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
|
| CVE-2026-9742 |
|
Vulnerability in mongodb (CVE-2026-9742)
vulnerability in mongodb (CVE-2026-9742). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.2.10, 8.3.3` or later.
|
| CVE-2026-9746 |
|
Vulnerability in mongodb (CVE-2026-9746)
vulnerability in mongodb (CVE-2026-9746). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
|
| CVE-2026-9740 |
|
Vulnerability in mongodb (CVE-2026-9740)
vulnerability in mongodb (CVE-2026-9740). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.
|
| CVE-2026-9735 |
|
Vulnerability in mongodb (CVE-2026-9735)
vulnerability in mongodb (CVE-2026-9735). Confidential information can be exposed externally. Mitigation: upgrade to `8.3.3` or later.
|
| CVE-2026-9743 |
|
Vulnerability in mongodb (CVE-2026-9743)
vulnerability in mongodb (CVE-2026-9743). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.24` or later.
|
| CVE-2026-8202 |
|
Vulnerability in mongodb (CVE-2026-8202)
vulnerability in mongodb (CVE-2026-8202). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.34, 8.0.23, 8.2.9, 8.3.2` or later.
|
| CVE-2026-8336 |
|
Use-After-Free in mongodb (CVE-2026-8336)
vulnerability in mongodb (CVE-2026-8336). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.2.9, 8.3.2` or later.
|
| CVE-2026-8053 |
|
Out-of-Bounds Write in mongodb (CVE-2026-8053)
out-of-bounds write in mongodb (CVE-2026-8053). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.0.33, 6.0.28, 7.0.34, 8.0.23, 8.2.9, 8.3.2` or later.
|
| CVE-2026-8200 |
|
Vulnerability in mongodb (CVE-2026-8200)
vulnerability in mongodb (CVE-2026-8200). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.34, 8.0.23, 8.2.9, 8.3.2` or later.
|
| CVE-2026-8199 |
|
Vulnerability in mongodb (CVE-2026-8199)
vulnerability in mongodb (CVE-2026-8199). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.34, 8.0.23, 8.2.9, 8.3.2` or later.
|
| CVE-2026-8201 |
|
Use-After-Free in mongodb (CVE-2026-8201)
vulnerability in mongodb (CVE-2026-8201). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.34, 8.0.23, 8.2.9, 8.3.2` or later.
|
| CVE-2026-8063 |
|
Vulnerability in mongodb (CVE-2026-8063)
vulnerability in mongodb (CVE-2026-8063). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.2.7` or later.
|
| CVE-2026-6691 |
|
Vulnerability in c (CVE-2026-6691)
vulnerability in c (CVE-2026-6691). Successful exploitation can lead to full system takeover.
|
| CVE-2025-14847 KEV |
|
[KEV] Vulnerability in Mongodb cisa (CVE-2025-14847)
vulnerability in Mongodb cisa (CVE-2025-14847). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|