MO
Database
MongoDB
On CISA KEVExploited in the wild
296
CVEs
2
On KEV
9.9
Max CVSS
38
New 30D
Severity mix
Critical 7High 97Medium 181Low 4
Watch
Add MongoDB to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-106438 | 3.7 | Oct 8 | Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver Affected: 1.4.0 before 1.30.13; 2.0.0 before 2.5.6 |
| CVE-2026-106428 | 3.7 | Oct 8 | Out-of-bounds read in SCRAM response parsing in MongoDB C Driver Affected: 1.1.0 before 1.30.13; 2.0.0 before 2.4.0 |
| CVE-2026-84969 | 3.7 | Sep 3 | Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output Affected: 1.30.0 before 1.30.9; 2.0.0 before 2.5.2 |
| CVE-2025-12119 | 3.3 | Nov 18 | Bulk write with options may read invalid memory Affected: through 2.1.2 |
Showing 4