MongoDB security vulnerabilities
Open-source infrastructure. Public CVE monitoring for MongoDB. Vendor security advisories are linked on this page.
Built for Operators of this product.
84 public records · 0 security-fix timeline events. 3 published in the last 7 days. 47 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 3
- High 13
- Medium 14
- Low 1
2026-08-0431 issues2026-11-01
Known exploited
View all known exploitedRecently published
Browse catalog- Medium6.5Waline login accepts a non-string email as a match-all MongoDB queryCheck if you run itEPSS 0.26%Oct 28, 2026
- Medium6.5Waline login accepts a non-string email as a match-all MongoDB queryOpen the advisoryOct 28, 2026
- High8.8Missing AuthorizationCheck if you run itEPSS 0.32%Oct 25, 2026
- CriticalMetasploit Wrap Up: Langflow, MongoDB, and MoreCheck if you run itEPSS 2.18%Oct 23, 2026
- Medium6.9BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guardsCheck if you run itEPSS 0.35%Oct 22, 2026
- High7.1Silent client-side encryption bypass via unescaped field-name regex in CSFLE schema builderCheck if you run itEPSS 0.21%Oct 22, 2026
- High7.1Update operator injection via single-element list rewriting in the update builderCheck if you run itEPSS 0.30%Oct 22, 2026
- Medium6.3Cross-document data leak via malformed BSON array parsing in reused thread bufferCheck if you run itEPSS 0.39%Oct 22, 2026
- Medium6.9Plaintext exposure of encrypted fields via ANSI code-page corruption of database nameCheck if you run itEPSS 0.11%Oct 22, 2026
- High7.6Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cacheCheck if you run itEPSS 0.20%Oct 22, 2026