Known Vulnerabilities for MongoDB Compass by MongoDB
Listed below are 3 of the newest known vulnerabilities associated with "MongoDB Compass" by "MongoDB".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115929 json | MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certific... | Not Provided | 2026-10-24 | 2026-11-02 |
| CVE-2026-113870 json | MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable s... | Not Provided | 2026-10-21 | 2026-10-30 |
| CVE-2026-96750 json | MongoDB Compass can interpolate a database name without escaping into the initial input of its embedded MongoDB shell when a ... | Not Provided | 2026-09-24 | 2026-09-25 |