Login Request a demo
JD
Product
Java Driver
by Mongodb · last CVE Sep 10, 2026
4
CVEs
0
On KEV
8.3
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 2Medium 2Low 0
Severity
All severities4Critical0High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Java Driver to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-88033
8.3
0%
Sep 10
GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Java Driver
Affected: 3.3.0 before 5.11.1
CVE-2026-88032
7.5
0%
Sep 10
Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver
Affected: 4.2.0 before 5.11.1
CVE-2021-20328
6.8
0%
Feb 25
Specific versions of the Java driver that support client-side field level encryption (CSFLE) fail to perform correct host name verification on the KMS server’s certificate
Affected: 3.11.0 before 3.11.3; 3.12.0 before 3.12.8; 4.0.0 before 4.0.6; 4.1.0 before 4.1.2; 4.2.0 before 4.2.1
CVE-2026-18710
6.5
0%
Aug 11
Cleartext Storage of Sensitive Information in MongoDB Driver Logging During Client Initialization
Affected: 4.11.1 before 5.9.2
Showing 4