Vulnerabilities in MongoDB, Inc.

10 results

CVE-2026-8053HIGHFlatBSON Duplicate Field Index DriftEPSS 0.6%CVE-2026-9101MEDIUMPrototype pollution in csv parsingEPSS 0.4%CVE-2026-8431CRITICALOps Manager RCE via webhook bodyEPSS 0.4%CVE-2026-9100MEDIUMHeap memory out of bounds read and crash in C Driver legacy GridFS file readerEPSS 0.3%CVE-2026-8202MEDIUMPost-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operatorsEPSS 0.3%CVE-2026-8199HIGHPost-auth memory exhaustion via bitwise match expressionsEPSS 0.3%CVE-2026-8336HIGHPost-authentication use-after-free error in $_internalJsEmit and mapreduce commandsEPSS 0.3%CVE-2026-8843HIGHCalling createIndex with certain index types can crash mongodEPSS 0.2%CVE-2026-8200MEDIUMSchema validation log messages may not redact user dataEPSS 0.2%CVE-2026-8201MEDIUMUse-After-Free in MongoDB FLE Query Analysis When Processing Positional Projections on Encrypted FieldsEPSS 0.1%