CVE-2026-13073

creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:11+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13077

creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:03+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13076

creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:00+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13075

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:58+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13074

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:55+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-9737

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:53+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13071

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:48+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13070

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:45+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13069

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:43+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13068

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13067

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:38+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13066

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:35+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: cert-manager, containerd, kubo-fips, minio, opentelemetry-collector-k8s, kubo, prometheus, loki, kubernetes-dashboard, reports-server, kubernetes, flux, external-dns, runc, cilium-envoy-fips, prometheus-mongodb-exporter, aactl, backup-restore-operator, hubble,...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: cert-manager, containerd, kubo-fips, minio, opentelemetry-collector-k8s, kubo, prometheus, loki, kubernetes-dashboard, reports-server, kubernetes, flux, external-dns, runc, cilium-envoy-fips, prometheus-mongodb-exporter, aactl, backup-restore-operator, hubble,...

Local File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader

A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit...

CVE-2026-13074

An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combination of parameters to the awaitable hello command in exhaust mode. The server's handling of this combination results in a response loop that bypasses normal throttling, allowing a...

CVE-2026-13076

An authenticated user can cause a mongod process to be terminated by the operating system under memory pressure by performing a specific data type conversion operation within MongoDB's aggregation framework. The behavior stems from disproportionate memory consumption during this operation, and...

CVE-2026-13078

A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit...

CVE-2026-13069

An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a MongoDB server by sending a crafted Queryable Encryption find payload containing an unvalidated field used to control an internal computation loop. The resulting resource exhaustion degrades availability fo...

CVE-2026-13070

A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP response from a remote peer during the TLS handshake. OCSP stapling validation is enabled by default for outgoing TLS connections. Affected scenarios require the remote peer to hold a...