Known vulnerabilities in MongoDB Server
Vendor:
MongoDB, Inc.
Software:
MongoDB Server
Software CPE:
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Website:
https://www.mongodb.com/
Total vulnerabilities:
106
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
8.3.8
8.0.29
7.0.40
8.2.12
8.0.28
7.0.39
8.3.7
4.4.31
7.0.36
8.2.11
8.2.10
8.0.26
8.0.25
8.0.24
7.0.37
7.0.35
6.0.29
5.0.34
8.3.4
8.3.3
8.3.1
8.3.0
8.3.2
6.0.28
5.0.33
8.2.9
8.0.23
7.0.34
8.2.7
8.0.21
7.0.32
8.2.6
8.0.20
7.0.31
8.2.5
8.2.4
8.0.19
8.0.18
7.0.30
7.0.29
8.0.17
6.0.27
5.0.32
4.4.30
8.2.3
7.0.28
7.0.27
8.2.2
8.0.16
7.0.26
8.0.15
7.0.25
8.2.1
8.0.14
7.0.24
8.2.0
8.0.13
6.0.26
8.1.3
7.0.23
8.0.12
7.0.22
6.0.25
8.1.2
8.0.11
8.0.10
7.0.21
6.0.24
8.1.1
8.1.0
8.0.9
7.0.20
6.0.23
8.0.8
7.0.19
8.0.7
6.0.22
8.0.6
8.0.5
7.0.18
7.0.17
6.0.21
5.0.31
6.0.20
7.0.16
8.0.4
7.0.15
6.0.19
5.0.30
8.0.3
8.0.2
8.0.1
6.0.18
8.0.0
5.0.29
7.0.14
7.3.4
7.0.13
6.0.17
5.0.28
7.0.12
6.0.16
7.3.3
5.0.27
7.0.11
7.0.10
7.3.2
7.0.9
6.0.15
7.3.1
7.0.8
5.0.26
7.3.0
7.0.7
7.2.2
4.4.29
7.2.1
7.0.6
6.0.14
5.0.25
6.0.13
5.0.24
4.4.28
7.0.5
7.2.0
4.4.27
4.2.25
5.0.23
7.1.1
6.0.12
7.0.4
4.4.26
7.0.3
5.0.22
6.0.11
7.1.0
7.0.2
4.4.25
6.0.10
5.0.21
7.0.1
4.4.24
5.0.20
6.0.9
7.0.0
6.0.8
5.0.19
4.4.23
6.3.2
6.0.7
4.4.22
5.0.18
6.0.6
6.3.1
5.0.17
4.4.21
6.3.0
4.4.20
5.0.16
6.0.5
6.2.1
5.0.15
4.4.19
4.2.24
6.2.0
6.0.4
6.1.1
5.0.14
4.4.18
6.0.3
6.1.0
4.2.23
5.0.13
6.0.2
4.4.17
5.0.12
6.0.1
5.0.11
4.4.16
4.2.22
5.0.10
6.0.0
4.2.21
5.3.2
4.4.15
5.0.9
4.4.14
4.2.20
5.0.8
5.0.7
5.3.1
5.3.0
4.4.13
4.2.19
5.2.1
5.0.6
4.0.28
4.4.12
5.2.0
4.2.18
4.4.11
5.0.5
5.1.1
5.0.4
5.1.0
4.4.10
4.2.17
4.4.9
5.0.3
4.2.16
4.0.27
5.0.2
4.4.8
4.0.26
5.0.1
4.4.7
5.0.0
4.2.15
4.0.25
4.4.6
4.2.14
4.0.24
4.4.5
4.2.13
3.6.23
4.0.23
4.4.4
3.6.22
4.2.12
4.4.3
4.0.22
4.5.1
4.4.0-rc1
4.2.11
4.4.2
3.6.21
4.0.21
4.2.10
4.7.0
3.6.20
4.4.1
4.0.20
4.2.9
21
4.4.0
3.6.19
4.2.8
4.0.19
4.2.7
3.6.18
4.2.6
4.0.18
4.3.6
4.3.5
4.2.5
4.0.17
4.2.4
4.5.0
4.3.4
4.0.16
4.3.3
3.4.24
3.6.17
4.0.15
4.2.3
4.0.14
2.9.3
2.9.1
2.9.0
1.6.6
1.3.8
1.3.7
1.3.6
1.1.5
4.2.2
3.6.16
4.3.2
4.3.1
3.6.15
3.4.23
4.2.1
4.0.13
3.6.14
4.3.0
4.2.0
4.1.13
4.1.12
4.1.11
4.1.10
4.1.9
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.0.12
4.0.11
4.0.10
4.0.9
4.0.8
4.0.7
4.0.6
4.0.5
4.0.4
4.0.3
3.6.13
3.6.12
3.6.11
3.6.10
3.6.9
3.4.22
3.4.21
3.4.20
3.4.19
3.4.18
3.3.15
3.3.14
3.3.13
3.3.12
3.3.11
3.3.10
3.3.9
3.3.8
3.3.7
3.3.6
3.3.5
3.3.4
3.3.3
3.3.2
3.3.1
3.3.0
3.2.22
3.2.21
3.2.20
3.2.19
3.2.18
3.2.17
3.2.16
3.2.15
3.2.14
3.2.13
3.2.12
3.2.11
3.2.10
3.2.9
3.2.8
3.2.7
3.2.6
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.9
3.1.8
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.15
3.0.14
3.0.13
3.0.12
3.0.11
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.8.0
2.7.8
2.7.7
2.7.6
2.7.5
2.7.4
2.7.3
2.7.2
2.7.1
2.7.0
2.6.12
2.6.11
2.6.9
2.6.8
2.6.7
2.6.6
2.6.5
2.6.4
2.6.3
2.6.2
2.6.1
2.6.0
2.5.5
2.5.4
2.5.3
2.5.2
2.5.1
2.5.0
2.4.14
2.4.13
2.4.12
2.4.11
2.4.10
2.4.9
2.4.8
2.4.7
2.4.6
2.4.5
2.4.4
2.4.3
2.4.2
2.4.1
2.4.0.
2.4.0
2.3.2
2.3.1
2.3.0
2.2.7
2.2.6
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2.0
2.1.2
2.1.1
2.1.0
2.0.9
2.0.8
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.9.2
1.9.1
1.9.0
1.8.5
1.8.4
1.8.3
1.8.2
1.8.1
1.8.0
1.7.6
1.7.5
1.7.4
1.7.3
1.7.2
1.7.1
1.7.0
1.6.5
1.6.4
1.6.3
1.6.2
1.6.1
1.6.0
1.5.8
1.5.7
1.5.6
1.5.5
1.5.4
1.5.3
1.5.2
1.5.1
1.5.0
1.4.5
1.4.4
1.4.3
1.4.2
1.4.1
1.4.0
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.2.0
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.1
1.0.0
0.9.10
0.9.9
0.9.8
0.9.7
0.9.6
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.9.0
0.8.0
0.2.1
0.2.0
0.1.7
0.1.6
0.1.5
0.1.4
0.1.3
0.1.2
0.1.1
0.1.0
0.0.9
0.0.8
0.0.7
0.0.6
0.0.5
0.0.4
0.0.3
4.1.3
4.1.2
4.1.1
4.1.0
4.0.2
4.0.1
4.0.0
3.7.9
3.7.8
3.7.7
3.7.6
3.7.5
3.7.4
3.7.3
3.7.2
3.7.1
3.7.0
3.6.8
3.6.7
3.6.6
3.6.5
3.6.4
3.6.3
3.6.2
3.6.1
3.6.0
3.5.13
3.5.12
3.5.11
3.5.10
3.5.9
3.5.8
3.5.7
3.5.6
3.5.5
3.5.4
3.5.3
3.5.2
3.5.1
3.5.0
3.4.17
3.4.16
3.4.15
3.4.14
3.4.13
3.4.12
3.4.11
3.4.10
3.4.8
3.4.9
3.4.7
3.4.6
3.4.5
3.4.4
3.4.3
3.4.2
3.4.1
3.4.0
2.6.10
Vulnerabilities (106)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144173 - Uncontrolled Recursion CVE-2026-9740 |
CWE-674 | Medium | 7.0.35, 8.0.24, 8.2.10, 8.3.3 | 18.08.2026 |
SB2026081854 |
||
| #VU144172 - Information Exposure Through Log Files CVE-2026-9735 |
CWE-532 | Low | 8.3.3 | 18.08.2026 |
SB2026081854 |
||
| #VU144171 - Improper Validation of Specified Type of Input CVE-2026-9753 |
CWE-1287 | Medium | 7.0.35, 8.0.24, 8.2.10, 8.3.3 | 18.08.2026 |
SB2026081854 |
||
| #VU144170 - NULL Pointer Dereference CVE-2026-9752 |
CWE-476 | Low | 7.0.35, 8.0.24, 8.2.10, 8.3.3 | 18.08.2026 |
SB2026081854 |
||
| #VU144169 - Information Exposure Through Log Files CVE-2026-9751 |
CWE-532 | Low | 7.0.35, 8.0.24, 8.2.10, 8.3.3 | 18.08.2026 |
SB2026081854 |
||
| #VU144168 - Reachable Assertion CVE-2026-9750 |
CWE-617 | Low | 7.0.35, 8.0.24, 8.2.10, 8.3.3 | 18.08.2026 |
SB2026081854 |
||
| #VU144167 - Reachable Assertion CVE-2026-9749 |
CWE-617 | Low | 7.0.35, 8.0.24, 8.2.10, 8.3.3 | 18.08.2026 |
SB2026081854 |
||
| #VU144166 - Reachable Assertion CVE-2026-9748 |
CWE-617 | Low | 7.0.35, 8.0.10, 8.2.10, 8.3.3 | 18.08.2026 |
SB2026081854 |
||
| #VU144165 - Reachable Assertion CVE-2026-9747 |
CWE-617 | Low | 7.0.35, 8.0.24, 8.2.10, 8.3.3 | 18.08.2026 |
SB2026081854 |
||
| #VU144164 - Reachable Assertion CVE-2026-9746 |
CWE-617 | Low | 7.0.35, 8.0.24, 8.2.10, 8.3.3 | 18.08.2026 |
SB2026081854 |
||
| #VU144163 - NULL Pointer Dereference CVE-2026-9743 |
CWE-476 | Low | 8.0.24 | 18.08.2026 |
SB2026081854 |
||
| #VU144162 - Improper Validation of Specified Type of Input CVE-2026-9742 |
CWE-1287 | Medium | 8.2.10, 8.3.3 | 18.08.2026 |
SB2026081854 |
||
| #VU144161 - Cleartext Transmission of Sensitive Information CVE-2026-9741 |
CWE-319 | Low | 7.0.35, 8.0.24, 8.2.10, 8.3.3 | 18.08.2026 |
SB2026081854 |
||
| #VU144133 - Use After Free CVE-2026-18692 |
CWE-416 | Medium | 8.3.8 | 18.08.2026 |
SB2026081848 |
||
| #VU144132 - Out-of-bounds read CVE-2026-18688 |
CWE-125 | Low | 7.0.40, 8.0.29, 8.3.8 | 18.08.2026 |
SB2026081848 |
||
| #VU144131 - Reachable Assertion CVE-2026-18695 |
CWE-617 | Low | 7.0.40, 8.0.29, 8.3.8 | 18.08.2026 |
SB2026081848 |
||
| #VU144130 - Integer underflow CVE-2026-18687 |
CWE-191 | Low | 8.0.29, 8.3.8 | 18.08.2026 |
SB2026081848 |
||
| #VU144129 - Use After Free CVE-2026-18706 |
CWE-416 | Low | 8.3.8 | 18.08.2026 |
SB2026081848 |
||
| #VU144128 - Reachable Assertion CVE-2026-18707 |
CWE-617 | Low | 8.3.8 | 18.08.2026 |
SB2026081848 |
||
| #VU144127 - Incorrect Authorization CVE-2026-18703 |
CWE-863 | Low | 8.3.8 | 18.08.2026 |
SB2026081848 |
Showing elements 1 - 20 out of 106