Vulnerabilidades en MongoDB, Inc.
10 resultadosAnálisis Vexday
MongoDB apresenta 10 vulnerabilidades registradas, todas publicadas nos últimos 90 dias, indicando risco recente e concentrado. Embora nenhuma esteja sob ataque ativo no momento, uma é crítica (CVSS alto) e a fraqueza dominante é CWE-416 (use-after-free), tipo clássico de falha de memória que demanda atenção em processos de patch.
CVE-2026-8053HIGHFlatBSON Duplicate Field Index DriftEPSS 0.6%CVE-2026-9101MEDIUMPrototype pollution in csv parsingEPSS 0.4%CVE-2026-8431CRITICALOps Manager RCE via webhook bodyEPSS 0.4%CVE-2026-9100MEDIUMHeap memory out of bounds read and crash in C Driver legacy GridFS file readerEPSS 0.3%CVE-2026-8202MEDIUMPost-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operatorsEPSS 0.3%CVE-2026-8199HIGHPost-auth memory exhaustion via bitwise match expressionsEPSS 0.3%CVE-2026-8336HIGHPost-authentication use-after-free error in $_internalJsEmit and mapreduce commandsEPSS 0.3%CVE-2026-8843HIGHCalling createIndex with certain index types can crash mongodEPSS 0.2%CVE-2026-8200MEDIUMSchema validation log messages may not redact user dataEPSS 0.2%CVE-2026-8201MEDIUMUse-After-Free in MongoDB FLE Query Analysis When Processing Positional Projections on Encrypted FieldsEPSS 0.1%