Vulnerabilities in MongoDB, Inc.

13 results

CVE-2026-8053HIGHFlatBSON Duplicate Field Index DriftEPSS 0.7%CVE-2026-9101MEDIUMPrototype pollution in csv parsingEPSS 0.4%CVE-2026-8431CRITICALOps Manager RCE via webhook bodyEPSS 0.4%CVE-2026-9100MEDIUMHeap memory out of bounds read and crash in C Driver legacy GridFS file readerEPSS 0.3%CVE-2026-8202MEDIUMPost-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operatorsEPSS 0.3%CVE-2026-8199HIGHPost-auth memory exhaustion via bitwise match expressionsEPSS 0.3%CVE-2026-8336HIGHPost-authentication use-after-free error in $_internalJsEmit and mapreduce commandsEPSS 0.3%CVE-2026-8843HIGHCalling createIndex with certain index types can crash mongodEPSS 0.2%CVE-2026-8200MEDIUMSchema validation log messages may not redact user dataEPSS 0.2%CVE-2026-115929HIGHMongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAsEPSS 0.2%CVE-2026-103546LOWImproper validation of Ops Manager configuration in MongoDB Kubernetes OperatorEPSS 0.2%CVE-2026-115930HIGHMongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAsEPSS 0.1%CVE-2026-8201MEDIUMUse-After-Free in MongoDB FLE Query Analysis When Processing Positional Projections on Encrypted FieldsEPSS 0.1%