Mongodb Server
Approved changes feed: RSS · Atom
cpe:2.3:a:mongodb_inc:mongodb_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mongodb Inc (9ab524e9-2bd0-5ee5-96be-506a074e6407) |
|---|---|
| Product | Mongodb Server (47de0d49-e20e-538e-93d8-a7a0f2a4ad80) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4358 |
vulnerable | 2026-06-08 08:05:13.275581 |
Memory safety issues in slot-based execution hash table spill
MEDIUM (6.4)
A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution (SBE) engine when an in-memory hash table is spilled to disk.
Published: 2026-03-17T19:00:07.518Z
Updated: 2026-03-17T20:08:24.920Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4148 |
vulnerable | 2026-06-08 08:05:12.693140 |
ExpressionContext use-after-free in classic engine $lookup and $graphLookup aggregation operators
HIGH (8.8)
A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline.
Published: 2026-03-17T15:53:57.874Z
Updated: 2026-03-18T03:55:44.426Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4147 |
vulnerable | 2026-06-08 08:05:12.683873 |
Stack memory disclosure in filemd5 command
MEDIUM (6.5)
An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command.
Published: 2026-03-17T15:50:21.888Z
Updated: 2026-03-17T16:09:55.480Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25613 |
vulnerable | 2026-06-08 07:53:20.101849 |
An unsafe cast in the MongoDB query planner can result in a segmentation fault.
MEDIUM (6.5)
An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index.
Published: 2026-02-10T18:54:50.376Z
Updated: 2026-02-10T19:15:20.731Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25612 |
vulnerable | 2026-06-08 07:53:20.101522 |
Internal ResourceId collision may affect unrelated collections
MEDIUM (6.5)
The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with one another in this representation causing unavailability between them due to conflicting locks.
Published: 2026-02-10T18:05:23.851Z
Updated: 2026-02-10T18:59:27.442Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25611 |
vulnerable | 2026-06-08 07:53:20.101130 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25610 |
vulnerable | 2026-06-08 07:53:20.100685 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25609 |
vulnerable | 2026-06-08 07:53:20.097952 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1850 |
vulnerable | 2026-06-08 07:49:09.754966 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1849 |
vulnerable | 2026-06-08 07:49:09.752703 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1848 |
vulnerable | 2026-06-08 07:49:09.752143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1847 |
vulnerable | 2026-06-08 07:49:09.750743 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10491 |
vulnerable | 2026-06-08 07:02:26.955530 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10061 |
vulnerable | 2026-06-08 07:02:26.233115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10060 |
vulnerable | 2026-06-08 07:02:26.232616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10059 |
vulnerable | 2026-06-08 07:02:26.232117 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0755 |
vulnerable | 2026-06-08 07:02:25.498125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1351 |
vulnerable | 2026-06-08 06:25:39.872160 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1409 |
vulnerable | 2026-06-08 05:52:35.790884 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.