[ Vendor · 3 CVEs ]
MongoDB Inc.
CVEs affecting MongoDB Inc. published in the last 30 days, plus any MongoDB Inc. CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112368 | 19 Oct 2026 | CVSS 7.5 | MongoDB Inc. PHP DriverAn uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted… | |
| CVE-2026-103546 | 5 Oct 2026 | CVSS 4.3 | MongoDB, Inc. Mongodb Controllers for KubernetesIn MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager… | |
| CVE-2025-14847 | 19 Dec 2025 | CVSS 7.5 | MongoDB and MongoDB Server Improper Handling of Length Parameter InconsistencyMismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue… | ExploitedFix |