MongoDB MongoDB Server vulnerabilities
121 published CVEs name MongoDB MongoDB Server among the affected products.
- 121Published CVEs121 of them scored
- 121Last 12 monthspublished in the last year
- 5Critical80 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-120819
Use-after-free in Wasm JS-BSON bridge lets read-only users read 24 KiB via $accumulator
MongoDB · MongoDB Server
Medium5.3 - CVE-2026-118383
Pre-authentication use-after-free in MongoDB Server replica set primary catch-up
MongoDB · MongoDB Server
Critical9.5 - CVE-2026-120828
Memory exhaustion via abandoned far-future read-concern waiters in disaggregated storage
MongoDB · MongoDB Server
High8.7 - CVE-2026-120826
Improper Authorization in MongoDB Server Sharded View Definition Handling Leads to Cross-Database Unauthorized Access
MongoDB · MongoDB Server
High7.1 - CVE-2026-120825
Improper Authorization in MongoDB Server Aggregation Framework View Definition Validation Leads to Unauthorized Collection Access
MongoDB · MongoDB Server
High7.1 - CVE-2026-120824
Post-authentication use-after-free in MongoDB Server time-series bucket validation
MongoDB · MongoDB Server
High8.7 - CVE-2026-120823
Missing Authorization Check in MongoDB Server Aggregation Framework Leads to Unauthorized Access to Deployment-Wide Configuration Data
MongoDB · MongoDB Server
Low2.3 - CVE-2026-120822
Missing Authorization Check in MongoDB Server Replication-Related Administrative Command Leads to Unauthorized Data Access
MongoDB · MongoDB Server
High8.6 - CVE-2026-120821
Post-authentication use-after-free in MongoDB Server aggregation sub-pipelines
MongoDB · MongoDB Server
High7.1 - CVE-2026-120820
Uncontrolled Resource Consumption in MongoDB Server Per-Namespace Encrypted-Field Statistics Table Leads to Denial of Service
MongoDB · MongoDB Server
Medium5.3