CVE-2026-13056

creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:16+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13055

creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:13+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13073

creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:11+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13077

creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:03+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13076

creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:00+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13075

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:58+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13074

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:55+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-9737

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:53+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13071

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:48+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13070

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:45+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13069

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:43+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13068

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13067

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:38+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13066

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:35+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: beats-fips, pgpool2exporter, kgateway-fips, external-secrets-operator, terragrunt-fips, cosign-fips, commercial-grafana, cloud-provider-azure-fips, spire-server-fips, fulcio-fips, zitadel, grafana-alloy-fips, net-kourier, terraform-provider-google,...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: beats-fips, pgpool2exporter, kgateway-fips, external-secrets-operator, terragrunt-fips, cosign-fips, commercial-grafana, cloud-provider-azure-fips, spire-server-fips, fulcio-fips, zitadel, grafana-alloy-fips, net-kourier, terraform-provider-google,...

Local File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader

A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit...

CVE-2026-13074

An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combination of parameters to the awaitable hello command in exhaust mode. The server's handling of this combination results in a response loop that bypasses normal throttling, allowing a...

CVE-2026-13076

An authenticated user can cause a mongod process to be terminated by the operating system under memory pressure by performing a specific data type conversion operation within MongoDB's aggregation framework. The behavior stems from disproportionate memory consumption during this operation, and...

CVE-2026-13078

A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit...