MongoDB Server at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 26 | 2 |
| Oct 2026 | 5 | 0 |
| Sep 2026 | 25 | 0 |
| Aug 2026 | 24 | 0 |
| Jul 2026 | 25 | 0 |
| Jun 2026 | 13 | 0 |
| May 2026 | 8 | 0 |
| Apr 2026 | 2 | 0 |
| Mar 2026 | 4 | 0 |
| Feb 2026 | 9 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 2 | 0 |
| Nov 2025 | 5 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 4 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 5 | 0 |
| Jun 2025 | 4 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 4 | 0 |
| Mar 2025 | 1 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
203 results · Feed
-
Medium 5.3
A memory-management flaw in the server-side JavaScript execution component of MongoDB Server can allow an authenticated…
-
Critical 9.5
A use-after-free in the replication component of MongoDB Server can occur when a newly elected replica set primary comp…
-
High 8.7
A replica-set database server node does not limit or reclaim internal wait records created while handling a client-supp…
-
High 7.1
An authorization flaw in the aggregation and view-definition handling of sharded deployments may allow a user holding o…
-
High 7.1
An authorization weakness in the aggregation framework of MongoDB Server may allow an authenticated user holding only b…
-
High 8.7
A use-after-free in the time-series collection component of MongoDB Server can occur when the server validates a time-s…
-
Low 2.3
A missing authorization check in the aggregation framework of MongoDB Server may allow a user holding any valid credent…
-
High 8.6
MongoDB Server may omit an authorization check on the resource that a replication-related administrative command actual…
-
High 7.1
A use-after-free in the aggregation framework of MongoDB Server can occur when certain expressions are evaluated in an …
-
Medium 5.3
MongoDB Server maintains an in-memory table of per-namespace statistics for operations that carry encrypted-field infor…
-
High 7.1
A use-after-free weakness in MongoDB Server's server-side JavaScript support for aggregation may allow a stale referenc…
-
High 7.1
A race condition in the schema validation component of MongoDB Server can occur when concurrent writes are checked agai…
-
Low 2.3
A user with basic read-tier database privileges can use an option on a server-side data-change notification feature to …
-
High 8.6
An incorrect authorization check in the MongoDB Server authorization subsystem may allow an unauthenticated party with …
-
High 7.5
An improper privilege management issue in the sharding subsystem of MongoDB Server may allow a user holding certain sha…
-
High 8.2
An issue in MongoDB Server's client-side field-level encryption (CSFLE) schema processing component allows encryption m…
-
Medium 6.0
An issue in MongoDB Server's query processing component allows an authenticated user with read privileges to cause a de…
-
Medium 6.0
A use-after-free issue exists in the MongoDB server’s classic query engine plan cache. Under certain query conditions, …
-
High 7.1
An issue in MongoDB server’s aggregation framework allows an authenticated user with read privileges to cause a denial …
-
Medium 6.1
A use-after-free read issue exists in MongoDB’s SBE (Slot-Based Execution) engine when processing aggregation pipelines…
-
Critical 9.1
An issue exists in MongoDB's macOS TLS client implementation where certificate chain-of-trust validation is bypassed fo…
-
High 7.5
A flaw in MongoDB’s X.509 cluster-membership authentication guard could allow a holder of a cluster-member certificate …
-
High 7.0
A flaw in MongoDB Server's user management commands may lead to incomplete cleanup of role authorization data when role…
-
Low 2.3
In MongoDB Server, an authenticated user with insert privileges on a collection could craft a command with specially co…
-
High 8.2
A flaw exists in the server-side SSPI Kerberos authentication handler on Windows Enterprise builds of MongoDB. When pro…
-
High 7.1
A use-after-free issue exists in MongoDB’s SBE (Slot-Based Execution) implementation of a window function accumulator u…
-
Medium 6.5
Incorrect authorization in MongoDB Server router for bulk writes to system namespaces
A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed aggregation pipeline. The issue leverages an internal aggregatio…
-
Medium 6.5
Collection validators using collation-accepting expressions can crash MongoDB Server on insert
MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated user…
-
Medium 5.4
Fixed values in MongoDB Server $bucket stage may be misread as field references
An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output tha…
-
Medium 6.5
Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Service
A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed aggregation pipeline. The issue leverages an internal aggregatio…
-
Medium 6.5
MongoDB Server may disclose process memory via a crafted `$_internalApplyOplogUpdate` aggregation pipeline
Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no…
-
High 7.5
Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption
A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a …
-
Medium 6.5
Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Server
An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume me…
-
High 7.5
Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Service
An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. A client that has network access to a router port and has not authenticated can supply connection-monitoring parameters that cause…
-
Medium 6.5
Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection Data
MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server's authorization subsystem to evaluate a dif…
-
Medium 6.5
Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search
A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue ste…
-
High 8.1
Insufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds Write
Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bou…
-
Medium 6.5
Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface
A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations. The same credentials are properly redacted in…
-
Low 2.7
Improper Redaction of Query Literals in MongoDB Server Query Statistics Serialization on Sharded Cluster Router
A security issue in MongoDB Server's query statistics serialization on the router allows users with monitoring privileges to access unredacted search query text from other users' operations. An improper conditional check in the serialization logic causes the …
-
Medium 6.5
Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Service
A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write commands. The crash state is durably persisted, causing the server process to repe…