MS
Product
MongoDB Server
by MongoDB, Inc. · last CVE May 18, 2026
On CISA KEVExploited in the wild
22
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 10Medium 12Low 0
Watch

Add MongoDB Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-14847
In wildKEV
7.5
83%
Dec 19
Zlib compressed protocol header length confusion may allow memory read
Affected: 8.2 before 8.2.3; 8.0 before 8.0.17; 7.0 before 7.0.28; 6.0 before 6.0.27; 5.0 before 5.0.32; 4.4 before 4.4.30; +3 more
Showing 1