en
MongoDB develops database software and managed data services centered on a flexible document data model. The company provides tools and language-specific drivers that help development teams store, query, secure, and operate application data in self-managed and cloud environments. Its platform has a global operating footprint.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/21/2026, MongoDB recorded 134 security vulnerabilities in the last 90 days across 24 products, including 73 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, MongoDB Server had the most security vulnerabilities in the MongoDB ecosystem, with 54 vulnerabilities—approximately 40.3% of the provider's total vulnerabilities during this period.
CVE-2026-113870Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON ParsingCVE-2026-104005Incorrect authorization in MongoDB Server router for bulk writes to system namespacesCVE-2026-104004Collection validators using collation-accepting expressions can crash MongoDB Server on insertCVE-2026-103965Fixed values in MongoDB Server $bucket stage may be misread as field referencesCVE-2026-96299Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Service334 Results | Page 1 of 34
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityLow |
| SeverityMedium |
| SeverityMedium |