MongoDB vulnerabilities
383 CVEs and advisories name MongoDB as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-84966BSON element injection via NUL-embedded document keys in builder append
- CVE-2026-84969Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output
- CVE-2026-84971Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path
- CVE-2026-84970Heap over-read or silent misparse via 32-bit truncation of JSON length in BSON JSON parser
- CVE-2026-81533MongoDB BI Connector ODBC Driver Memory-Safety Issue When Parsing Oversized LIMIT Values
- CVE-2026-81532BI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory Corruption
- CVE-2026-81520MongoDB Connector for BI Unbounded Authentication Negotiation Leading to Connection Exhaustion
- CVE-2026-81518BI Connector Optional Client Certificate Verification Allows Unauthenticated Connections
- CVE-2026-81517MongoDB Connector for BI Improper Error Handling of Log Write Failures May Cause Loss of SQL Service
- CVE-2026-81490MongoDB Connector for BI Improper Error Handling During Schema Sampling May Cause Loss of SQL Service
- CVE-2026-77586MongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE Output
- CVE-2026-77184MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE Output
- CVE-2026-76798MongoSQL Transition Readiness Tool Improper Output Encoding in Generated HTML Reports
- CVE-2026-76797MongoSQL Transition Readiness Tool Improper Neutralization of Formula Elements in Generated Reports
- CVE-2026-76794MongoDB BI Connector Transition Readiness Report Improper HTML Encoding When Processing Database Metadata
- CVE-2026-81530KMS master key exposure via unredacted credential serialization in driver settings string
- CVE-2026-81529Connection-option injection via unescaped settings in the canonical MongoDB URL builder
- CVE-2026-81528NoSQL injection via array replacement bypassing update shape validation in driver write path
- CVE-2026-81527NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation
- CVE-2026-81526Cross-database write redirection via unvalidated dotted database name in bulk write namespaces
- CVE-2026-81525Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver
- CVE-2026-81524Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver
- CVE-2026-81523Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt
- CVE-2026-81522Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ Driver
- CVE-2026-81521Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driver
- CVE-2026-75573MongoDB Connector for BI mongodrdl Logs TLS Private-Key Password When Duplicate Options Are Supplied
- CVE-2026-75159MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination
- CVE-2026-19003MongoDB BI Connector ODBC driver may write outside an allocated buffer when the setup dialog opens a data source with oversized path settings
- CVE-2026-19004MongoDB BI Connector ODBC Driver Memory-Safety Issue When Handling Stored Procedure Output Parameters
- CVE-2026-18888MongoDB BI Connector ODBC driver may write outside an allocated buffer when retrieving large floating point values as character data