MONGODB

Products

Exploited and recent CVEs

• CVE-2026-120959 Low 3.7 MongoDB Atlas SQL ODBC Driver uses ignored SQLBindCol BufferLength as fixed-width row-array stride, causing out-of-bounds writes 0.2%
• CVE-2026-120952 High 7.1 MongoDB Atlas SQL ODBC Driver writes 48-byte Extended JSON into fixed 16-byte SQL_C_GUID target, causing a 32-byte out-of-bounds write 0.4%
• CVE-2026-120567 Medium 5.4 EF Core provider: pipeline-form ExecuteUpdate evaluates a user string setter as a $-field reference 0.1%
• CVE-2026-120953 Medium 4.3 Atlas SQL JDBC Driver <=4.0.0: OIDC discovery endpoints not scheme-validated - attacker-controlled URI dispatched to OS protocol handler 0.2%
• CVE-2026-120954 Low 3.7 Silent element-count truncation via 32-bit bit-length overflow in packed-bit vector views 0.2%
• CVE-2026-120955 High 7.5 MongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download_to_stream() Aborts Application on Malformed GridFS Metadata 0.4%
• CVE-2026-120956 High 7.1 remote abort and memory disclosure from a malformed cursor.ns 0.3%
• CVE-2026-120684 Medium 6.5 MongoDB C Driver GridFS gap lets a shared writer recover a protected client's password 0.3%
• CVE-2026-120678 High 7.5 MongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service) 0.4%
• CVE-2026-120673 Medium 5.5 Rust Driver 3.9.1 exports CSFLE plaintext in `db.query.text` before encrypting the command 0.1%
• CVE-2026-119674 Low 3.7 mongorestore may restore encoded collection names into an unintended collection 0.2%
• CVE-2026-119673 Low 2.8 mongofiles may write outside the working directory through a symlink 0.1%
• CVE-2026-119672 Medium 4.8 mongofiles may disclose GridFS content to standard output through a stored filename 0.2%
• CVE-2026-119675 High 8.6 mongorestore may bypass collection guards through a system.buckets prefix 0.2%
• CVE-2026-119179 High 7.0 MongoDB Node.js driver: Connection pool desynchronization after operation timeout can expose other user's data 0.3%
• CVE-2026-116641 Medium 6.8 The DB Tools trust certificates issued by recoverable eMudhra intermediate CAs 0.1%
• CVE-2026-118581 Medium 6.5 NoSQL injection via mismatched BSON size prefix in raw document splice to the wire protocol 0.2%
• CVE-2026-118510 High 8.8 Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDs 0.3%
• CVE-2026-114655 Medium 5.9 KMS request injection via unsanitized key vault and provider values in libmongocrypt 0.3%
• CVE-2026-114654 Medium 6.5 BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards 0.3%
• CVE-2026-114653 Medium 6.5 Silent client-side encryption bypass via unescaped field-name regex in CSFLE schema builder 0.2%
• CVE-2026-114652 Medium 6.5 Update operator injection via single-element list rewriting in the update builder 0.3%
• CVE-2026-114651 Medium 4.0 Cross-document data leak via malformed BSON array parsing in reused thread buffer 0.4%
• CVE-2026-114650 Medium 5.9 Plaintext exposure of encrypted fields via ANSI code-page corruption of database name 0.1%
• CVE-2026-114650 Medium 5.9 Plaintext exposure of encrypted fields via ANSI code-page corruption of database name 0.1%
• CVE-2026-114649 Medium 6.8 Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cache 0.2%
• CVE-2026-114648 High 7.6 NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keys 0.3%
• CVE-2026-114647 Medium 4.3 NoSQL operator injection via unvalidated replacement document in findOneAndReplace 0.3%
• CVE-2026-114646 Medium 6.5 NoSQL command injection via mismatched raw BSON length prefix written verbatim to the wire 0.3%
• CVE-2026-114645 Medium 5.2 Heap overflow via 32-bit length wrap of the URI username in Windows Kerberos auth message wrapping 0.2%