MongoDB Multiple Vulnerabilities
Release Date:
24 Jul 2026
530
Views
RISK: Medium Risk
TYPE: Servers - Database Servers
Multiple vulnerabilities were identified in MongoDB. A remote attacker could exploit some of these vulnerabilities to trigger security restriction bypass, remote code execution, data manipulation, denial of service condition, elevation of privilege and sensitive information disclosure on the targeted system.
Impact
- Denial of Service
- Information Disclosure
- Remote Code Execution
- Security Restriction Bypass
- Elevation of Privilege
- Data Manipulation
System / Technologies affected
- MongoDB Compass 1.38.0 versions prior to 1.49.7
- MongoDB Server 7.0.0 versions prior to 7.0.39
- MongoDB Server 8.0.0 versions prior to 8.0.28
- MongoDB Server 8.2.0 versions prior to 8.2.12
- MongoDB Server 8.3.0 versions prior to 8.3.7
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
Vulnerability Identifier
- CVE-2026-9737
- CVE-2026-13055
- CVE-2026-13056
- CVE-2026-13057
- CVE-2026-13058
- CVE-2026-13059
- CVE-2026-13060
- CVE-2026-13061
- CVE-2026-13062
- CVE-2026-13063
- CVE-2026-13064
- CVE-2026-13065
- CVE-2026-13066
- CVE-2026-13067
- CVE-2026-13068
- CVE-2026-13069
- CVE-2026-13070
- CVE-2026-13071
- CVE-2026-13072
- CVE-2026-13073
- CVE-2026-13074
- CVE-2026-13075
- CVE-2026-13076
- CVE-2026-13077
- CVE-2026-13078
- CVE-2026-14881
Source
Related Link
Related Tags
Share with