Vulnerabilidades en MongoDB
215 resultadosCVE-2026-6914HIGHMD5 checksum creation may cause availability lossEPSS 0.3%CVE-2026-81518HIGHBI Connector Optional Client Certificate Verification Allows Unauthenticated ConnectionsEPSS 0.3%CVE-2026-87110MEDIUMOps Manager Uncontrolled Resource Consumption in Monitoring EndpointsEPSS 0.3%CVE-2026-120956HIGHremote abort and memory disclosure from a malformed cursor.nsEPSS 0.3%CVE-2026-13068LOWMongoDB mongos Improper Authorization Check in Cursor Termination Allowing Cross-Database Privilege MisuseEPSS 0.3%CVE-2026-18698MEDIUMImproper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate CommandEPSS 0.2%CVE-2026-120953MEDIUMAtlas SQL JDBC Driver <=4.0.0: OIDC discovery endpoints not scheme-validated - attacker-controlled URI dispatched to OS protocol handlerEPSS 0.2%CVE-2026-96297MEDIUMMongoDB Server may disclose process memory via a crafted `$_internalApplyOplogUpdate` aggregation pipelineEPSS 0.2%CVE-2026-106428MEDIUMOut-of-bounds read in SCRAM response parsing in MongoDB C DriverEPSS 0.2%CVE-2026-113870HIGHImproper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON ParsingEPSS 0.2%CVE-2026-18712HIGHImproper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification of Other CollectionsEPSS 0.2%CVE-2026-81521HIGHCross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go DriverEPSS 0.2%CVE-2026-107325HIGHApplication denial of service via missing BSON array length validation in MongoDB Go DriverEPSS 0.2%CVE-2026-104005HIGHIncorrect authorization in MongoDB Server router for bulk writes to system namespacesEPSS 0.2%CVE-2026-104004HIGHCollection validators using collation-accepting expressions can crash MongoDB Server on insertEPSS 0.2%CVE-2026-96299HIGHMissing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of ServiceEPSS 0.2%CVE-2026-18687HIGHImproper Validation in MongoDB Queryable Encryption Maintenance Operation Leads to Denial of Service and Index CorruptionEPSS 0.2%CVE-2026-120954MEDIUMSilent element-count truncation via 32-bit bit-length overflow in packed-bit vector viewsEPSS 0.2%CVE-2026-107324HIGHApplication denial of service via integer overflow in BSON value-length validation in MongoDB Go DriverEPSS 0.2%CVE-2026-76794MEDIUMMongoDB BI Connector Transition Readiness Report Improper HTML Encoding When Processing Database MetadataEPSS 0.2%