MONGODB MongoDB Server

• CVE-2026-104005 Medium 6.5 Incorrect authorization in MongoDB Server router for bulk writes to system namespaces 0.2%
• CVE-2026-104004 Medium 6.5 Collection validators using collation-accepting expressions can crash MongoDB Server on insert 0.2%
• CVE-2026-103965 Medium 5.4 Fixed values in MongoDB Server $bucket stage may be misread as field references 0.1%
• CVE-2026-96299 Medium 6.5 Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Service 0.2%
• CVE-2026-96297 Medium 6.5 MongoDB Server may disclose process memory via a crafted `$_internalApplyOplogUpdate` aggregation pipeline 0.2%
• CVE-2026-89099 High 7.5 Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption 0.3%
• CVE-2026-82076 Medium 6.5 Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Server 0.4%
• CVE-2026-82075 High 7.5 Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Service 0.5%
• CVE-2026-82074 Medium 6.5 Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection Data 0.4%
• CVE-2026-82073 Medium 6.5 Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search 0.4%
• CVE-2026-82071 High 8.1 Insufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds Write 0.5%
• CVE-2026-82070 Medium 6.5 Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface 0.3%
• CVE-2026-82069 Low 2.7 Improper Redaction of Query Literals in MongoDB Server Query Statistics Serialization on Sharded Cluster Router 0.4%
• CVE-2026-82068 Medium 6.5 Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Service 0.4%
• CVE-2026-82067 High 8.1 Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at Startup 0.5%
• CVE-2026-82066 Medium 4.3 Heap Out-of-Bounds Read in MongoDB Server Query Planning Component 0.4%
• CVE-2026-82065 Medium 6.5 Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata 0.4%
• CVE-2026-82064 High 7.5 Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members 0.5%
• CVE-2026-82063 Medium 5.3 Use-After-Free in MongoDB Server Cursor Management Component Leads to Denial of Service 0.4%
• CVE-2026-82062 Medium 5.5 Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypass 0.5%
• CVE-2026-82061 High 8.1 Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Service 0.5%
• CVE-2026-82060 Medium 5.4 Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups 0.3%
• CVE-2026-82059 Medium 5.3 Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service 0.4%
• CVE-2026-82058 Medium 6.5 Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service 0.4%
• CVE-2026-82057 Medium 6.5 Type Confusion in MongoDB Server WiredTiger Storage Engine via Custom Collection Configuration Leads to Persistent Denial of Service 0.4%
• CVE-2026-82056 Medium 5.3 Race Condition in MongoDB Server Text Index Query Parsing Leads to Heap Use-After-Free and Denial of Service 0.3%
• CVE-2026-82055 Medium 6.5 Null Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of Service 0.4%
• CVE-2026-82054 Medium 6.5 Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service 0.4%
• CVE-2026-82053 High 8.1 Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role Assignment 0.4%
• CVE-2026-82052 Medium 6.5 $regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars 0.5%
• CVE-2026-18712 High 8.1 Improper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification of Other Collections 0.2%
• CVE-2026-18711 High 7.1 Use-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure 0.5%
• CVE-2026-18709 Medium 6.4 Missing Authorization in MongoDB Sharded Transaction Commit/Abort Handling Leads to Cross-Shard Data Inconsistency 0.2%
• CVE-2026-18698 Medium 5.4 Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Command 0.2%
• CVE-2026-18690 High 8.1 Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections 0.4%
• CVE-2026-18699 Medium 6.5 Improper Input Validation in MongoDB Query Planner Leads to Denial of Service 0.4%
• CVE-2026-18691 High 8.8 Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure 0.4%
• CVE-2026-18702 Medium 6.4 Improper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic Settings 0.3%
• CVE-2026-18694 High 7.1 Out-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure 0.4%
• CVE-2026-18708 Medium 6.4 Improper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopes 0.4%
• CVE-2026-18696 Medium 6.5 Improper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections 0.4%
• CVE-2026-18700 Medium 6.5 Use-After-Free in MongoDB Geospatial Validation Leads to Denial of Service 0.4%
• CVE-2026-18701 Medium 6.5 Type Confusion in MongoDB Query Subsystem Leads to Denial of Service 0.4%
• CVE-2026-18697 High 7.5 Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos 0.4%
• CVE-2026-18693 High 7.6 Out-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory Disclosure 0.3%
• CVE-2026-18705 Medium 6.5 Improper Authorization in MongoDB Atlas Vector Search Allows Unauthorized Access to Protected View Data 0.4%
• CVE-2026-18704 Medium 6.5 Improper Authorization in MongoDB Aggregation Framework Allows Read-Only User to Perform Unauthorized Write Operations 0.3%
• CVE-2026-18692 High 8.8 Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution 0.6%
• CVE-2026-18688 High 7.1 Out-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory Disclosure 0.4%
• CVE-2026-18695 Medium 6.5 Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service 0.4%