Vulnerabilidades en MongoDB Inc
61 resultadosCVE-2024-6381MEDIUMMongoDB C Driver bson_strfreev may be susceptible to integer overflowEPSS 0.4%CVE-2024-6375MEDIUMMissing authorization check may lead to shard key refinementEPSS 0.4%CVE-2025-6710HIGHPre-authentication Denial of Service Stack Overflow Vulnerability in JSON Parsing via Excessive Recursion in MongoDBEPSS 0.4%CVE-2025-10060MEDIUMMongoDB may be susceptible to Invariant Failure in Transactions due Upsert OperationEPSS 0.4%CVE-2024-8654MEDIUMMongoDB Server may access non-initialized region of memory leading to unexpected behaviourEPSS 0.4%CVE-2026-4358MEDIUMMemory safety issues in slot-based execution hash table spillEPSS 0.4%CVE-2025-6714HIGHIncorrect Handling of incomplete data may prevent mongoS from Accepting New ConnectionsEPSS 0.4%CVE-2025-1691HIGHMongoDB Shell may be susceptible to Control Character Injection via autocompleteEPSS 0.4%CVE-2025-7259MEDIUMCertain Queries with Duplicate _id Fields May Cause MongoDB Server to CrashEPSS 0.3%CVE-2026-4148HIGHExpressionContext use-after-free in classic engine $lookup and $graphLookup aggregation operatorsEPSS 0.3%CVE-2025-6712MEDIUMMongoDB Server may be susceptible to DoS due to Accumulated Memory AllocationEPSS 0.3%CVE-2026-1849HIGHMongod can run out of stack memory when expressions create deeply nested documentsEPSS 0.3%CVE-2025-10061MEDIUMMalformed $group Query May Cause MongoDB Server to CrashEPSS 0.3%CVE-2026-2303MEDIUMHeap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leakEPSS 0.3%CVE-2026-1848HIGHConnections received from the proxy port may not count towards total accepted connectionsEPSS 0.3%CVE-2025-10059MEDIUMMongoDB Server router will crash when incorrect lsid is set on a sharded queryEPSS 0.3%CVE-2026-1850HIGHAn authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplificationEPSS 0.3%CVE-2026-1847HIGHMongoDB Server may crash when inserting large documentsEPSS 0.3%CVE-2025-3085HIGHMongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revokedEPSS 0.3%CVE-2026-25613HIGHAn unsafe cast in the MongoDB query planner can result in a segmentation fault.EPSS 0.3%