CVE-2026-103965 MEDIUM 5.3 Mongodb Server — An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly… 2026-10-13 CVE-2026-104004 HIGH 7.1 Mongodb Server — MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validat… 2026-10-13 CVE-2026-104005 HIGH 7.1 Mongodb Server — A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user wit… 2026-10-13 CVE-2026-96297 MEDIUM 6 Mongodb Server — Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memo… 2026-10-13 CVE-2026-96299 HIGH 7.1 Mongodb Server — A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user wit… 2026-10-13 CVE-2026-87108 LOW 2.3 Ops Manager — An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record as… 2026-10-09 CVE-2026-87109 MEDIUM 6 Ops Manager — An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollmen… 2026-10-09 CVE-2026-87110 MEDIUM 6.9 Ops Manager — An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endp… 2026-10-09 CVE-2026-106428 MEDIUM 6.3 C Driver — An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyon… 2026-10-08 CVE-2026-106429 HIGH 7.1 Libmongocrypt — An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failur… 2026-10-08 CVE-2026-106430 MEDIUM 6 C++ Driver — The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accep… 2026-10-08 CVE-2026-106431 MEDIUM 5.9 C Driver — An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediate… 2026-10-08 CVE-2026-106432 LOW 2 Php Driver — The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When… 2026-10-08 CVE-2026-106433 HIGH 8.7 Libmongocrypt — Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incomp… 2026-10-08 CVE-2026-106434 MEDIUM 5.3 Libmongocrypt — The explicit decryption component of MongoDB libmongocrypt can return an unrecognized encrypted payload unchan… 2026-10-08 CVE-2026-106435 MEDIUM 5.9 Python Driver — The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed… 2026-10-08 CVE-2026-106436 MEDIUM 6.3 Php Driver — The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson'… 2026-10-08 CVE-2026-106437 MEDIUM 5.9 C Driver — The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON mi… 2026-10-08 CVE-2026-106438 MEDIUM 5.1 C Driver — An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precisio… 2026-10-08 CVE-2026-107324 HIGH 8.2 Go Driver — An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an a… 2026-10-08 CVE-2026-107325 HIGH 8.2 Go Driver — Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runti… 2026-10-08 CVE-2026-96744 HIGH 7.1 Laravel Mongodb (Php) — Improper neutralization of special elements in data query logic in the cache lock implementation of the MongoD… 2026-09-24 CVE-2026-96745 MEDIUM 6.3 Php Driver — Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class … 2026-09-24 CVE-2026-96746 HIGH 8.3 C Driver — An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated… 2026-09-24 CVE-2026-96747 MEDIUM 5.3 Python Driver — The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoin… 2026-09-24 CVE-2026-96748 HIGH 8.3 Python Driver — PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host lis… 2026-09-24 CVE-2026-96749 HIGH 7.5 Python Driver — An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native exte… 2026-09-24 CVE-2026-96750 HIGH 7.3 Compass — MongoDB Compass can interpolate a database name without escaping into the initial input of its embedded MongoD… 2026-09-24 CVE-2026-93758 HIGH 8.6 Mongoid — An insecure direct object reference in the nested attributes handling of the Mongoid object-document mapper ma… 2026-09-18 CVE-2026-93759 HIGH 8.8 Mongoid — Mongoid does not neutralize a string-typed query criterion supplied to its query builder, and instead passes i… 2026-09-18 CVE-2026-93760 HIGH 8.3 Mongoid — Mongoid does not restrict which query operators may come from caller-supplied filter data when an application … 2026-09-18 CVE-2026-93761 HIGH 8.7 Mongoid — An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid … 2026-09-18 CVE-2026-93762 CRITICAL 9.2 Mongoid — Mongoid contains an unsafe reflection weakness in the query path used for embedded documents. An application t… 2026-09-18 CVE-2026-93763 HIGH 7.1 Mongoid — A protection mechanism failure in the object-document mapper's encryption configuration generation can cause f… 2026-09-18 CVE-2026-93764 HIGH 7.1 Mongoid — Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field… 2026-09-18 CVE-2026-93765 HIGH 8.3 Mongoid — Mongoid contains an unsafe reflection weakness in the document persistence layer of its object-document mappin… 2026-09-18 CVE-2026-92756 MEDIUM 6.8 Mongodb Entity Framework Core Provider — Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and… 2026-09-17 CVE-2026-92757 MEDIUM 6.8 Mongodb Entity Framework Core Provider — Applications built on MongoDB Entity Framework Core Provider which place a database name in the connection str… 2026-09-17 CVE-2026-92758 MEDIUM 5.7 Mongodb Entity Framework Core Provider — If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect… 2026-09-17 CVE-2026-93393 CRITICAL 9.2 C Driver — A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Win… 2026-09-17 CVE-2026-93394 MEDIUM 6.3 C Driver — A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication han… 2026-09-17 CVE-2026-93395 MEDIUM 6.9 C Driver — A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow… 2026-09-17 CVE-2026-89099 HIGH 7.7 Mongodb Server — A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate … 2026-09-11 CVE-2026-88022 HIGH 8.4 Laravel Mongodb (Php) — Improper neutralization of special elements in data query logic in the MongoDB integration for Laravel can cau… 2026-09-10 CVE-2026-88023 MEDIUM 6.1 Mongodb Php Library — Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Lib… 2026-09-10 CVE-2026-88024 MEDIUM 6.1 Rust Driver — Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Dr… 2026-09-10 CVE-2026-88025 MEDIUM 6.1 C# Driver — Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C# Driv… 2026-09-10 CVE-2026-88026 HIGH 7.1 C# Driver — Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the Mo… 2026-09-10 CVE-2026-88027 HIGH 7.1 Laravel Mongodb (Php) — Improper neutralization of special elements in data query logic in the embedded-document relation handling of … 2026-09-10 CVE-2026-88028 HIGH 7.1 Laravel Mongodb (Php) — Improper neutralization of special elements in data query logic in the polymorphic relation handling of the Mo… 2026-09-10 CVE-2026-88029 MEDIUM 6.1 Python Driver — Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python … 2026-09-10 CVE-2026-88030 MEDIUM 6.1 Ruby Driver — Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Dr… 2026-09-10 CVE-2026-88031 MEDIUM 6.1 Go Driver — Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driv… 2026-09-10 CVE-2026-88032 HIGH 8.2 Java Driver — A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native … 2026-09-10 CVE-2026-88033 MEDIUM 6.1 Java Driver — Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Dr… 2026-09-10 CVE-2026-88034 MEDIUM 6.1 C++ Driver — Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Dri… 2026-09-10 CVE-2026-88035 MEDIUM 5.7 C Driver — A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually l… 2026-09-10 CVE-2026-88036 MEDIUM 6.1 C Driver — Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Drive… 2026-09-10 CVE-2026-82052 HIGH 7.1 Mongodb Server — The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to c… 2026-09-08 CVE-2026-82053 HIGH 7.6 Mongodb Server — A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain s… 2026-09-08 CVE-2026-82054 HIGH 7.1 Mongodb Server — A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processin… 2026-09-08 CVE-2026-82055 HIGH 7.1 Mongodb Server — A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null… 2026-09-08 CVE-2026-82056 MEDIUM 6 Mongodb Server — A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handli… 2026-09-08 CVE-2026-82057 HIGH 7.1 Mongodb Server — A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash t… 2026-09-08 CVE-2026-82058 HIGH 7.1 Mongodb Server — A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite p… 2026-09-08 CVE-2026-82059 MEDIUM 6 Mongodb Server — An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authentic… 2026-09-08 CVE-2026-82060 LOW 2.3 Mongodb Server — In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users … 2026-09-08 CVE-2026-82061 HIGH 7.2 Mongodb Server — A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authentic… 2026-09-08 CVE-2026-82062 HIGH 7 Mongodb Server — A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a … 2026-09-08 CVE-2026-82063 MEDIUM 6 Mongodb Server — A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated u… 2026-09-08 CVE-2026-82064 HIGH 8.7 Mongodb Server — A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a sp… 2026-09-08 CVE-2026-82065 HIGH 7.1 Mongodb Server — A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with co… 2026-09-08 CVE-2026-82066 MEDIUM 5.3 Mongodb Server — A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenti… 2026-09-08 CVE-2026-82067 CRITICAL 9.2 Mongodb Server — Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause th… 2026-09-08 CVE-2026-82068 HIGH 7.1 Mongodb Server — A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent … 2026-09-08 CVE-2026-82069 MEDIUM 5.1 Mongodb Server — A security issue in MongoDB Server's query statistics serialization on the router allows users with monitoring… 2026-09-08 CVE-2026-82070 HIGH 7.1 Mongodb Server — A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitori… 2026-09-08 CVE-2026-82071 HIGH 7.2 Mongodb Server — Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user… 2026-09-08 CVE-2026-82073 HIGH 7.1 Mongodb Server — A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read pr… 2026-09-08 CVE-2026-82074 HIGH 7.1 Mongodb Server — MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticate… 2026-09-08 CVE-2026-82075 HIGH 8.7 Mongodb Server — An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-clust… 2026-09-08 CVE-2026-82076 HIGH 7.1 Mongodb Server — An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ord… 2026-09-08