Vulnerabilities in MongoDB
215 resultsCVE-2026-84965MEDIUMHeap write primitive via size round-up wrap during JSON parsing on 32-bit buildsEPSS 0.1%CVE-2026-84970MEDIUMHeap over-read or silent misparse via 32-bit truncation of JSON length in BSON JSON parserEPSS 0.1%CVE-2026-75573MEDIUMMongoDB Connector for BI mongodrdl Logs TLS Private-Key Password When Duplicate Options Are SuppliedEPSS 0.1%CVE-2026-9735MEDIUMKeyfile contents are in MongoDB Server logsEPSS 0.1%CVE-2026-106434MEDIUMUnrecognized payload acceptance in explicit decryption in MongoDB libmongocryptEPSS 0.1%CVE-2026-9751MEDIUMSensitive data could be written to mongod.logEPSS 0.1%CVE-2026-114650MEDIUMPlaintext exposure of encrypted fields via ANSI code-page corruption of database nameEPSS 0.1%CVE-2026-88035MEDIUMHeap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C DriverEPSS 0.1%CVE-2026-9741HIGHClient side encryption fails to encrypt values in a $vectorSearchEPSS 0.1%CVE-2026-120673MEDIUMRust Driver 3.9.1 exports CSFLE plaintext in `db.query.text` before encrypting the commandEPSS 0.1%CVE-2026-81523LOWCross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocryptEPSS 0.1%CVE-2026-106431MEDIUMOne-byte heap buffer overflow in BSON bulk document writer in MongoDB C DriverEPSS 0.1%CVE-2026-81530MEDIUMKMS master key exposure via unredacted credential serialization in driver settings stringEPSS 0.1%CVE-2026-13067HIGHtlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain SocketEPSS 0.1%CVE-2026-106435MEDIUMApplication denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python DriverEPSS 0.1%