MongoDB vulnerabilities
383 CVEs and advisories name MongoDB as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-93759Server-side JavaScript injection via string query criteria bypassing the strict operator allowlist
- CVE-2026-93760NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guard
- CVE-2026-93761Denial of service via unbounded regex matching in Mongoid's in-memory query matcher
- CVE-2026-93762Data deletion and attribute disclosure via field-name method injection in in-memory queries
- CVE-2026-93763Silent plaintext persistence via unresolved callable database name in encryption schema map
- CVE-2026-93764Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation
- CVE-2026-93765Document deletion and process crash via unvalidated method-name dispatch in atomic pop operation
- CVE-2026-93758Cross-principal document update, theft, and deletion via unvalidated id in nested attributes
- CVE-2026-93395Integer Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer()
- CVE-2026-93394libmongoc SCRAM client nonce-validation bypass
- CVE-2026-93393Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream
- CVE-2026-92757Malformed connection string may disable field level encryption
- CVE-2026-92758Logs may collect sensitive information
- CVE-2026-92756Combining encryption settings may disable encryption
- CVE-2026-89099Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption
- CVE-2026-88036GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver
- CVE-2026-88035Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver
- CVE-2026-88034GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C++ Driver
- CVE-2026-88033GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Java Driver
- CVE-2026-88032Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver
- CVE-2026-88031GridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver
- CVE-2026-88030GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver
- CVE-2026-88029GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Python Driver
- CVE-2026-88028Unauthorized document disclosure via query-operator injection in polymorphic relation identifiers in MongoDB integration for Laravel
- CVE-2026-88027Mass deletion and overwrite of embedded documents via query-operator injection in embedded record keys in MongoDB integration for Laravel
- CVE-2026-88026Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver
- CVE-2026-88025GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# Driver
- CVE-2026-88024GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Rust Driver
- CVE-2026-88023GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB PHP Library
- CVE-2026-88022Unauthorized document disclosure and deletion via query-operator injection in explicit equality filters in MongoDB integration for Laravel