MS
Product
MongoDB Server
On CISA KEVExploited in the wild
21
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 10Medium 11Low 0
Watch
Add MongoDB Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-8843 | 6.5 | May 18 | Calling createIndex with certain index types can crash mongod Affected: 7.0 before 7.0.32; 8.0 before 8.0.21; 8.2 before 8.2.6 |
| CVE-2026-8202 | 6.5 | May 13 | Post-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators Affected: 7.0 before 7.0.34; 8.0 before 8.0.23; 8.2 before 8.2.9; 8.3 before 8.3.2 |
| CVE-2026-8336 | 6.5 | May 13 | Post-authentication use-after-free error in $_internalJsEmit and mapreduce commands Affected: 8.2 before 8.2.9; 8.3 before 8.3.2 |
| CVE-2026-8199 | 6.5 | May 13 | Post-auth memory exhaustion via bitwise match expressions Affected: 7.0 before 7.0.34; 8.0 before 8.0.23; 8.2 before 8.2.9; 8.3 before 8.3.2 |
| CVE-2026-8063 | 6.5 | May 7 | Post-auth null pointer dereference when aggregating against a view with empty search pipeline Affected: 8.2.0 before 8.2.7 |
| CVE-2026-25613 | 6.5 | Feb 10 | An unsafe cast in the MongoDB query planner can result in a segmentation fault. Affected: 7.0 before 7.0.29; 8.0 before 8.0.18; 8.2 before 8.2.4 |
| CVE-2026-25610 | 6.5 | Feb 10 | Invalid $geoNear index hint may cause server crash Affected: 8.0 before 8.0.13; 7.0 before 7.0.29 |
| CVE-2026-25612 | 6.5 | Feb 10 | Internal ResourceId collision may affect unrelated collections Affected: 8.2 before 8.2.4; 8.0 before 8.0.18; 7.0 before 7.0.29 |
| CVE-2026-8200 | 5.3 | May 13 | Schema validation log messages may not redact user data Affected: 7.0 before 7.0.34; 8.0 before 8.0.23; 8.2 before 8.2.9; 8.3 before 8.3.2 |
| CVE-2026-4147 | 4.3 | Mar 17 | Stack memory disclosure in filemd5 command Affected: 8.2 before 8.2.6; 8.0 before 8.0.20; 7.0 before 7.0.31 |
| CVE-2026-25609 | 4.3 | Feb 10 | profile command may permit unauthorized configuration Affected: 8.2 before 8.2.4; 8.0 before 8.0.18; 7.0 before 7.0.29 |
Showing 11
