Vulnerabilidades en MongoDB
215 resultadosCVE-2026-9748HIGH$_internalConvertBucketIndexStats may crash the mongod server when working on no timeseries inputEPSS 0.3%CVE-2026-120684MEDIUMMongoDB C Driver GridFS gap lets a shared writer recover a protected client's passwordEPSS 0.3%CVE-2026-114648HIGHNoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keysEPSS 0.3%CVE-2026-89099HIGHRace Condition in MongoDB Server Document Value Layer Leads to Memory CorruptionEPSS 0.3%CVE-2026-96744HIGHUnauthorized cache lock takeover via expression injection in lock owner values in MongoDB integration for LaravelEPSS 0.3%CVE-2026-84963MEDIUMSilent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parserEPSS 0.3%CVE-2026-9743HIGHAggregation sub-pipeline null dereference may allow DoS via crafted getMoreEPSS 0.3%CVE-2026-81527MEDIUMNoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translationEPSS 0.3%CVE-2026-114647MEDIUMNoSQL operator injection via unvalidated replacement document in findOneAndReplaceEPSS 0.3%CVE-2026-77184MEDIUMMongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE OutputEPSS 0.3%CVE-2026-119179HIGHMongoDB Node.js driver: Connection pool desynchronization after operation timeout can expose other user's dataEPSS 0.3%CVE-2026-114652HIGHUpdate operator injection via single-element list rewriting in the update builderEPSS 0.3%CVE-2026-9753HIGHServer crash via malformed binary diff passed to $_internalApplyOplogUpdate.EPSS 0.3%CVE-2026-13069HIGHQueryable Encryption FLE2 Find Payload Missing Input Validation Leading to Resource ExhaustionEPSS 0.3%CVE-2026-76798MEDIUMMongoSQL Transition Readiness Tool Improper Output Encoding in Generated HTML ReportsEPSS 0.3%CVE-2026-106429HIGHApplication denial of service via malformed KMS endpoint in MongoDB libmongocryptEPSS 0.3%CVE-2026-18704HIGHImproper Authorization in MongoDB Aggregation Framework Allows Read-Only User to Perform Unauthorized Write OperationsEPSS 0.3%CVE-2026-81529HIGHConnection-option injection via unescaped settings in the canonical MongoDB URL builderEPSS 0.3%CVE-2026-118510HIGHLaravel MongoDB `whereDoesntHave` misses deny records for numeric string IDsEPSS 0.3%CVE-2026-81528MEDIUMNoSQL injection via array replacement bypassing update shape validation in driver write pathEPSS 0.3%