MongoDB Inc. MongoDB

Name: MongoDB Inc. MongoDB
Brand: MongoDB Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical8high15medium0low

updated 2026-10-27

vulnerabilities (45)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-14847US	—OT critical	83.2% (100th)	KEV	no fix	2025-12-19	6 versions
CVE-2015-1609US	medium5.0	2.76% (86th)	—	no fix	2015-03-30	3 versions
CVE-2020-7929US	medium6.5	1.30% (70th)	—	no fix	2021-03-01	2 versions
CVE-2021-20333US	medium5.3	1.30% (70th)	—	no fix	2021-07-23	3 versions
CVE-2019-2390US	high7.8	0.93% (61st)	—	no fix	2019-08-30	3 versions
CVE-2026-25611US	—	0.86% (58th)	—	no fix	2026-02-10	≤ 7.0.30
CVE-2025-0755US	high7.5	0.79% (56th)	—	no fix	2025-03-18	2 versions
CVE-2020-7924US	medium6.5	0.74% (55th)	—	no fix	2021-04-12	4 versions
CVE-2020-7921US	medium5.3OT elevated	0.66% (52nd)	—	no fix	2020-05-06	4 versions
CVE-2026-8053US	—	0.66% (51st)	—	no fix	2026-05-13	6 versions
CVE-2024-8305US	medium6.5	0.59% (48th)	—	no fix	2024-10-21	4 versions
CVE-2025-6709US	—	0.51% (43rd)	—	no fix	2025-06-26	3 versions
CVE-2024-1351US	critical9.8	0.50% (43rd)	—	no fix	2024-03-07	4 versions
CVE-2025-3083US	—	0.45% (39th)	—	no fix	2025-04-01	3 versions
CVE-2023-1409US	high7.5	0.44% (38th)	—	no fix	2023-08-23	5 versions
CVE-2025-12657US	medium5.5	0.39% (33rd)	—	no fix	2025-11-03	3 versions
CVE-2026-11933US	high8.8	0.38% (32nd)	—	no fix	2026-06-12	7 versions
CVE-2025-10060US	high7.5	0.38% (32nd)	—	no fix	2025-09-05	4 versions
CVE-2026-9750US	—	0.37% (30th)	—	no fix	2026-06-09	4 versions
CVE-2026-4358US	high7.5	0.36% (29th)	—	no fix	2026-03-17	4 versions
CVE-2026-9740US	—	0.34% (28th)	—	no fix	2026-06-09	4 versions
CVE-2026-9748US	—	0.32% (25th)	—	no fix	2026-06-09	4 versions
CVE-2025-10061US	—	0.32% (24th)	—	no fix	2025-09-05	4 versions
CVE-2026-1848US	—	0.30% (23rd)	—	no fix	2026-02-10	≤ 7.0.30
CVE-2025-10059US	—	0.29% (22nd)	—	no fix	2025-09-05	3 versions
CVE-2025-3085US	critical9.8	0.29% (21st)	—	no fix	2025-04-01	4 versions
CVE-2026-1847US	high7.5	0.28% (21st)	—	no fix	2026-02-10	≤ 7.0.30
CVE-2025-6711US	medium4.9	0.28% (20th)	—	no fix	2025-07-07	3 versions
CVE-2026-25610US	—	0.28% (20th)	—	no fix	2026-02-10	≤ 7.0.30
CVE-2026-9747US	—	0.27% (19th)	—	no fix	2026-06-09	4 versions
CVE-2025-11979US	medium6.5	0.27% (19th)	—	no fix	2025-10-20	3 versions
CVE-2026-8202US	medium6.5	0.26% (18th)	—	no fix	2026-05-13	4 versions
CVE-2025-6706US	high8.8	0.26% (18th)	—	no fix	2025-06-26	3 versions
CVE-2026-8199US	—	0.26% (17th)	—	no fix	2026-05-13	4 versions
CVE-2026-25612US	—	0.23% (13th)	—	no fix	2026-02-10	4 versions
CVE-2025-14345US	medium5.4	0.22% (12th)	—	no fix	2025-12-09	≤ 7.0.26
CVE-2024-8207US	medium6.7	0.21% (10th)	—	no fix	2024-08-27	3 versions
CVE-2026-8200US	medium5.3	0.20% (10th)	—	no fix	2026-05-13	4 versions
CVE-2026-25609US	medium4.3OT elevated	0.20% (10th)	—	no fix	2026-02-10	≤ 7.0.30
CVE-2025-6707US	medium5.4OT elevated	0.17% (7th)	—	no fix	2025-06-26	3 versions
CVE-2025-11575US	—OT elevated	0.14% (3rd)	—	no fix	2025-10-23	—
CVE-2026-9751US	—	0.11% (1st)	—	no fix	2026-06-09	4 versions

showing 42 of 45

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-617Reachable Assertion4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-295Improper Certificate Validation3 CVEs
CWE-416Use After Free3 CVEs
CWE-532Insertion of Sensitive Information into Log File3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-863Incorrect Authorization2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)42 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan