Vendor
MongoDB
383 known vulnerabilities.
MongoDB at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 41 | 2 |
| Oct 2026 | 42 | 0 |
| Sep 2026 | 71 | 2 |
| Aug 2026 | 55 | 1 |
| Jul 2026 | 26 | 0 |
| Jun 2026 | 15 | 0 |
| May 2026 | 13 | 0 |
| Apr 2026 | 3 | 0 |
| Mar 2026 | 5 | 0 |
| Feb 2026 | 11 | 0 |
| Jan 2026 | 1 | 0 |
| Dec 2025 | 2 | 0 |
| Nov 2025 | 6 | 0 |
| Oct 2025 | 5 | 0 |
| Sep 2025 | 4 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 5 | 0 |
| Jun 2025 | 4 | 0 |
| May 2025 | 1 | 1 |
| Apr 2025 | 4 | 0 |
| Mar 2025 | 1 | 0 |
| Feb 2025 | 5 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
Products
Latest advisories
-
High max 8.1NCSC-2026-0209 14 CVEs
Kwetsbaarheden verholpen in MongoDB Server
MongoDB heeft meerdere kwetsbaarheden verholpen in MongoDB Server.
-
High max 7.5
Kwetsbaarheid verholpen in MongoDB
De ontwikkelaars van MongoDB hebben een kwetsbaarheid verholpen in MongoDB.
383 results · Feed
-
Medium 5.3
A memory-management flaw in the server-side JavaScript execution component of MongoDB Server can allow an authenticated…
-
Critical 9.5
A use-after-free in the replication component of MongoDB Server can occur when a newly elected replica set primary comp…
-
High 8.7
A replica-set database server node does not limit or reclaim internal wait records created while handling a client-supp…
-
High 7.1
An authorization flaw in the aggregation and view-definition handling of sharded deployments may allow a user holding o…
-
High 7.1
An authorization weakness in the aggregation framework of MongoDB Server may allow an authenticated user holding only b…
-
High 8.7
A use-after-free in the time-series collection component of MongoDB Server can occur when the server validates a time-s…
-
Low 2.3
A missing authorization check in the aggregation framework of MongoDB Server may allow a user holding any valid credent…
-
High 8.6
MongoDB Server may omit an authorization check on the resource that a replication-related administrative command actual…
-
High 7.1
A use-after-free in the aggregation framework of MongoDB Server can occur when certain expressions are evaluated in an …
-
Medium 5.3
MongoDB Server maintains an in-memory table of per-namespace statistics for operations that carry encrypted-field infor…
-
High 7.1
A use-after-free weakness in MongoDB Server's server-side JavaScript support for aggregation may allow a stale referenc…
-
High 7.1
A race condition in the schema validation component of MongoDB Server can occur when concurrent writes are checked agai…
-
Low 2.3
A user with basic read-tier database privileges can use an option on a server-side data-change notification feature to …
-
High 8.6
An incorrect authorization check in the MongoDB Server authorization subsystem may allow an unauthenticated party with …
-
High 7.5
An improper privilege management issue in the sharding subsystem of MongoDB Server may allow a user holding certain sha…
-
High 8.2
An issue in MongoDB Server's client-side field-level encryption (CSFLE) schema processing component allows encryption m…
-
Medium 6.0
An issue in MongoDB Server's query processing component allows an authenticated user with read privileges to cause a de…
-
Medium 6.0
A use-after-free issue exists in the MongoDB server’s classic query engine plan cache. Under certain query conditions, …
-
High 7.1
An issue in MongoDB server’s aggregation framework allows an authenticated user with read privileges to cause a denial …
-
Medium 6.1
A use-after-free read issue exists in MongoDB’s SBE (Slot-Based Execution) engine when processing aggregation pipelines…
-
Critical 9.1
An issue exists in MongoDB's macOS TLS client implementation where certificate chain-of-trust validation is bypassed fo…
-
High 7.5
A flaw in MongoDB’s X.509 cluster-membership authentication guard could allow a holder of a cluster-member certificate …
-
High 7.0
A flaw in MongoDB Server's user management commands may lead to incomplete cleanup of role authorization data when role…
-
Low 2.3
In MongoDB Server, an authenticated user with insert privileges on a collection could craft a command with specially co…
-
High 8.2
A flaw exists in the server-side SSPI Kerberos authentication handler on Windows Enterprise builds of MongoDB. When pro…
-
High 7.1
A use-after-free issue exists in MongoDB’s SBE (Slot-Based Execution) implementation of a window function accumulator u…
-
Low 3.7
MongoDB Atlas SQL ODBC Driver uses ignored SQLBindCol BufferLength as fixed-width row-array stride, causing out-of-bounds writes
A memory-handling flaw in the MongoDB Atlas SQL ODBC Driver can cause values returned for a query to be written outside the bounds of a buffer provided by the calling application. A party able to influence the values a query returns may cause data to be place…
-
High 7.1
MongoDB Atlas SQL ODBC Driver writes 48-byte Extended JSON into fixed 16-byte SQL_C_GUID target, causing a 32-byte out-of-bounds write
An out-of-bounds write in the MongoDB Atlas SQL ODBC Driver may be triggered when a value of a particular database type is retrieved into a fixed-width client-side target. The driver produces a textual form of the value that is longer than the fixed target th…
-
Medium 5.4
EF Core provider: pipeline-form ExecuteUpdate evaluates a user string setter as a $-field reference
The MongoDB Entity Framework Core provider does not neutralize special elements in values passed to SetProperty when an ExecuteUpdate call also contains a setter that reads the entity being updated. In that case the update is sent as an aggregation pipeline, …
-
Medium 4.3
Atlas SQL JDBC Driver <=4.0.0: OIDC discovery endpoints not scheme-validated - attacker-controlled URI dispatched to OS protocol handler
A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an interactive sign-in flow the driver accepts endpoint addresses supplied by the remote endpoint it is pointed at without validating their scheme, and pass…
-
Low 3.7
Silent element-count truncation via 32-bit bit-length overflow in packed-bit vector views
A weakness in the BSON library's handling of a specialized binary vector data type allows an arithmetic wraparound when computing the number of elements described by an oversized attacker-supplied value. On builds where the platform word size is 32 bits, an a…
-
High 7.5
MongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download_to_stream() Aborts Application on Malformed GridFS Metadata
The GridFS file download API in the MongoDB C Driver does not check the result of an internal operation under certain error conditions during file retrieval. This can cause the process to terminate when stream operations continue. A user who can influence fil…
-
High 7.1
remote abort and memory disclosure from a malformed cursor.ns
The MongoDB C Driver does not validate the type or format of a namespace field returned by the server in a query response. A MongoDB endpoint that a client application connects to, without needing any credentials, can return a malformed value in that field. T…
-
Medium 6.5
MongoDB C Driver GridFS gap lets a shared writer recover a protected client's password
A memory-initialization flaw in the legacy GridFS file handling of the MongoDB C Driver can cause uninitialized process memory to be treated as valid file content and stored on the server. A database user holding ordinary write access to a shared storage area…
-
High 7.5
MongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service)
A memory management flaw in the MongoDB C Driver's handling of compressed responses may cause the client library to hold on to memory that is never released. An unauthenticated party that controls the database endpoint a client application connects to may cau…
-
Medium 5.5
Rust Driver 3.9.1 exports CSFLE plaintext in `db.query.text` before encrypting the command
A component of the MongoDB Rust Driver that records diagnostic tracing data can capture command content before automatic client-side field level encryption is applied. In deployments that turn on the optional tracing capability together with automatic in-use …
-
Low 3.7
mongorestore may restore encoded collection names into an unintended collection
MongoDB Database Tools mongorestore incorrectly URL-decodes an original collection name read from metadata when the corresponding dump filename has been truncated. A database user who can create and populate a suitably encoded collection can cause a later aut…
-
Low 2.8
mongofiles may write outside the working directory through a symlink
MongoDB Database Tools mongofiles does not resolve existing parent-directory symlinks when validating output paths for get_regex. An unauthorized user who can both upload a GridFS file and place a symlink in the operator's download working directory can cause…
-
Medium 4.8
mongofiles may disclose GridFS content to standard output through a stored filename
MongoDB Database Tools mongofiles uses a database-stored GridFS filename as the output destination for get_id when --local is not specified. A user who can modify the file metadata can set the stored filename to '-', causing a later authorized retrieval to wr…
-
High 8.6
mongorestore may bypass collection guards through a system.buckets prefix
MongoDB Database Tools mongorestore inconsistently handles the system.buckets. prefix when validating collection names in an untrusted dump. A specially crafted collection name can bypass special-collection guards and operator namespace filters, causing a res…