Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, lead…Check if you run itEPSS 0.32%Sep 11, 2026
- High7.1An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an i…Check if you run itEPSS 0.41%Sep 8, 2026
- High8.7An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process.Check if you run itEPSS 0.52%Sep 8, 2026
- High7.1MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework.Check if you run itEPSS 0.36%Sep 8, 2026
- High7.1A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and ac…Check if you run itEPSS 0.36%Sep 8, 2026
- High7.2Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters durin…Check if you run itEPSS 0.54%Sep 8, 2026
- High7.1A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credenti…Check if you run itEPSS 0.33%Sep 8, 2026
- Medium5.1A security issue in MongoDB Server's query statistics serialization on the router allows users with monitoring privileges to access unredacted search query text from o…Check if you run itEPSS 0.41%Sep 8, 2026
- High7.1A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retrya…Check if you run itEPSS 0.40%Sep 8, 2026
- Critical9.2Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled…Check if you run itEPSS 0.51%Sep 8, 2026
- Medium5.3A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server.Check if you run itEPSS 0.39%Sep 8, 2026
- High7.1A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service.Check if you run itEPSS 0.40%Sep 8, 2026
- High8.7A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member.Check if you run itEPSS 0.52%Sep 8, 2026
- Medium6.0A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service.Check if you run itEPSS 0.37%Sep 8, 2026
- High7.0A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifyi…Check if you run itEPSS 0.45%Sep 8, 2026
- High7.2A use-after-free security issue exists in the server's query execution memory tracking subsystem.Check if you run itEPSS 0.53%Sep 8, 2026
- Low2.3In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shape…Check if you run itEPSS 0.34%Sep 8, 2026
- Medium6.0An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations.Check if you run itEPSS 0.37%Sep 8, 2026
- High7.1A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server.Check if you run itEPSS 0.40%Sep 8, 2026
- High7.1A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process.Check if you run itEPSS 0.42%Sep 8, 2026
- Medium6.0A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths.Check if you run itEPSS 0.33%Sep 8, 2026
- High7.1A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference.Check if you run itEPSS 0.40%Sep 8, 2026
- High7.1A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing.Check if you run itEPSS 0.40%Sep 8, 2026
- High7.6A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication…Check if you run itEPSS 0.41%Sep 8, 2026
- High7.1The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server (mongod).Check if you run itEPSS 0.50%Sep 8, 2026
Sort