MongoDB Multiple Vulnerabilities

Release Date: 13 Feb 2026 5351 Views

RISK: Medium Risk

TYPE: Servers - Database Servers

Multiple vulnerabilities were identified in MongoDB. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and sensitive information disclosure on the targeted system.

Impact

Denial of Service
Information Disclosure

System / Technologies affected

MongoDB 7.0 versions prior to 7.0.29
MongoDB 8.0 versions prior to 8.0.13
MongoDB 8.0 versions prior to 8.0.18
MongoDB 8.2 versions prior to 8.2.2
MongoDB 8.2 versions prior to 8.2.4

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

https://www.mongodb.com/resources/products/alerts#security

Vulnerability Identifier

CVE-2026-1847
CVE-2026-1848
CVE-2026-1849
CVE-2026-1850
CVE-2026-25609
CVE-2026-25610
CVE-2026-25611
CVE-2026-25612
CVE-2026-25613

Source

MongoDB