mongodb
Top products
Latest CVEs
The 15 most recently published vulnerabilities affecting mongodb.
- CVE-2026-89099Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption7.5
- CVE-2026-88036GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver8.3
- CVE-2026-88035Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver4.7
- CVE-2026-88034GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C++ Driver8.3
- CVE-2026-88033GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Java Driver8.3
- CVE-2026-88032Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver5.9
- CVE-2026-88031GridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver8.1
- CVE-2026-88030GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver8.3
- CVE-2026-88029GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Python Driver8.3
- CVE-2026-88028Unauthorized document disclosure via query-operator injection in polymorphic relation identifiers in MongoDB integration for Laravel6.5
- CVE-2026-88027Mass deletion and overwrite of embedded documents via query-operator injection in embedded record keys in MongoDB integration for Laravel7.1
- CVE-2026-88026Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver6.5
- CVE-2026-88025GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# Driver8.3
- CVE-2026-88024GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Rust Driver8.3
- CVE-2026-88023GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB PHP Library8.3