UBUNTU-CVE-2026-18707

An issue in MongoDB Server could allow an authenticated user, includin...

CVE-2025-14847

🚨 CVE-2025-14847 — “MongoBleed” Una vulnerabilidad de divulgación de memoria no autenticada de alta gravedad 📖 Tabla de Contenidos Resumen Detalles Técnicos Gravedad y CVSS Versiones Afectadas Impacto en el Mundo Real Resumen de Explotación Guía de Detección Remedio Mitigación Temporal Lista de...

Linux Distros Unpatched Vulnerability : CVE-2026-18704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections...

Linux Distros Unpatched Vulnerability : CVE-2026-18706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause ...

Linux Distros Unpatched Vulnerability : CVE-2026-18701

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server process to terminate unexpectedly by...

Linux Distros Unpatched Vulnerability : CVE-2026-18703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based...

Linux Distros Unpatched Vulnerability : CVE-2026-18698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that...

Linux Distros Unpatched Vulnerability : CVE-2026-18700

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the...

Linux Distros Unpatched Vulnerability : CVE-2026-18705

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different,...

Linux Distros Unpatched Vulnerability : CVE-2026-18702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the enti...

Linux Distros Unpatched Vulnerability : CVE-2026-18699

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by...

BIT-MONGODB-2026-13078 Local File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader

A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit...

Linux Distros Unpatched Vulnerability : CVE-2026-18694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be...

Linux Distros Unpatched Vulnerability : CVE-2026-18690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that...

Linux Distros Unpatched Vulnerability : CVE-2026-18691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used...

Linux Distros Unpatched Vulnerability : CVE-2026-18692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to b...

Linux Distros Unpatched Vulnerability : CVE-2026-18687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypte...

Linux Distros Unpatched Vulnerability : CVE-2026-18688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of- bounds memory read by providing a specially formed...

Linux Distros Unpatched Vulnerability : CVE-2026-18693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to...

Linux Distros Unpatched Vulnerability : CVE-2026-18697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting...