Known Vulnerabilities for MongoDB Server by MongoDB Inc
Listed below are 10 of the newest known vulnerabilities associated with "MongoDB Server" by "MongoDB Inc".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-34163 json | FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, FastGPT's MCP (Model Context Protocol) tools endpoints (... | Not Provided | 2026-03-31 | 2026-03-31 |
| CVE-2026-31827 json | Alienbin is an anonymous code and text sharing web service. In 1.0.0 and earlier, the /save endpoint in server.js drops and r... | Not Provided | 2026-03-10 | 2026-03-11 |
| CVE-2026-8336 json | After invoking $_internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in a ... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-8202 json | Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim,... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-8201 json | A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting client-si... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-8200 json | When schema validation is enabled on a collection and an update or insert would violate the collection's schema, the local se... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-8199 json | An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, ... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-8063 json | An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view. When resol... | Not Provided | 2026-05-07 | 2026-05-07 |
| CVE-2026-8053 json | An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privilege... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-6914 json | Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB ser... | Not Provided | 2026-04-29 | 2026-04-29 |