Vulnerabilidades em MongoDB

215 resultados
Análise Vexday

MongoDB apresenta 23 vulnerabilidades catalogadas, com concentração recente de 17 divulgações nos últimos 90 dias, indicando atividade elevada de descoberta de falhas. Nenhuma das vulnerabilidades está sob ataque ativo (KEV) e não há críticas de CVSS, reduzindo o risco imediato, mas a fraqueza dominante em autenticação/autorização (CWE-617) merece monitoramento contínuo em ambientes de produção.

CVE-2026-84965MEDIUMHeap write primitive via size round-up wrap during JSON parsing on 32-bit buildsEPSS 0.1%CVE-2026-84970MEDIUMHeap over-read or silent misparse via 32-bit truncation of JSON length in BSON JSON parserEPSS 0.1%CVE-2026-75573MEDIUMMongoDB Connector for BI mongodrdl Logs TLS Private-Key Password When Duplicate Options Are SuppliedEPSS 0.1%CVE-2026-9735MEDIUMKeyfile contents are in MongoDB Server logsEPSS 0.1%CVE-2026-106434MEDIUMUnrecognized payload acceptance in explicit decryption in MongoDB libmongocryptEPSS 0.1%CVE-2026-9751MEDIUMSensitive data could be written to mongod.logEPSS 0.1%CVE-2026-114650MEDIUMPlaintext exposure of encrypted fields via ANSI code-page corruption of database nameEPSS 0.1%CVE-2026-88035MEDIUMHeap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C DriverEPSS 0.1%CVE-2026-9741HIGHClient side encryption fails to encrypt values in a $vectorSearchEPSS 0.1%CVE-2026-120673MEDIUMRust Driver 3.9.1 exports CSFLE plaintext in `db.query.text` before encrypting the commandEPSS 0.1%CVE-2026-81523LOWCross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocryptEPSS 0.1%CVE-2026-106431MEDIUMOne-byte heap buffer overflow in BSON bulk document writer in MongoDB C DriverEPSS 0.1%CVE-2026-81530MEDIUMKMS master key exposure via unredacted credential serialization in driver settings stringEPSS 0.1%CVE-2026-13067HIGHtlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain SocketEPSS 0.1%CVE-2026-106435MEDIUMApplication denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python DriverEPSS 0.1%