MongoDB Inc MongoDB Server

Name: MongoDB Inc MongoDB Server
Brand: MongoDB Inc

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

3critical10high10medium0low

updated 2026-10-27

vulnerabilities (41)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-6713US	medium6.5	0.47% (40th)	Exploit	7.0.20	2025-07-07	4 versions
CVE-2026-25611US	—	0.86% (58th)	—	7.0.29	2026-02-10	3 versions
CVE-2025-0755US	high7.5	0.79% (56th)	—	7.0.16	2025-03-18	2 versions
CVE-2024-8305US	medium6.5	0.59% (48th)	—	7.3.4	2024-10-21	3 versions
CVE-2024-10921US	high8.1	0.55% (46th)	—	6.0.19	2024-11-14	4 versions
CVE-2024-3372US	—	0.55% (46th)	—	6.0.14	2024-05-14	3 versions
CVE-2025-6709US	—	0.51% (43rd)	—	8.0.5	2025-06-26	3 versions
CVE-2024-1351US	critical9.8	0.50% (43rd)	—	no fix	2024-03-07	5 versions
CVE-2024-3374US	—	0.46% (39th)	—	no fix	2024-05-14	2 versions
CVE-2025-3083US	—	0.45% (39th)	—	7.0.16	2025-04-01	3 versions
CVE-2023-1409US	high7.5	0.44% (38th)	—	no fix	2023-08-23	3 versions
CVE-2024-6384US	medium5.3	0.43% (37th)	—	7.0.11	2024-08-13	3 versions
CVE-2025-3084US	—	0.41% (35th)	—	7.0.16	2025-04-01	4 versions
CVE-2024-6375US	medium6.5OT elevated	0.38% (32nd)	—	7.0.3	2024-07-01	3 versions
CVE-2025-10060US	high7.5	0.38% (32nd)	—	8.0.12	2025-09-05	3 versions
CVE-2025-6710US	—	0.38% (32nd)	—	7.0.17	2025-06-26	3 versions
CVE-2024-8654US	critical9.8	0.37% (31st)	—	no fix	2024-09-10	≤ 6.0.3
CVE-2025-6714US	—	0.36% (30th)	—	6.0.23	2025-07-07	3 versions
CVE-2026-4358US	high7.5	0.36% (29th)	—	7.0.31	2026-03-17	3 versions
CVE-2025-7259US	—	0.35% (28th)	—	no fix	2025-07-07	≤ 8.1 ≤8.1.0
CVE-2026-4148US	—	0.34% (27th)	—	8.2.6	2026-03-17	3 versions
CVE-2025-6712US	—	0.33% (26th)	—	8.0.10	2025-07-07	8.0 → 8.0.10
CVE-2026-1849US	high7.5	0.32% (25th)	—	7.0.29	2026-02-10	3 versions
CVE-2025-10061US	—	0.32% (24th)	—	6.0.25	2025-09-05	4 versions
CVE-2026-1848US	—	0.30% (23rd)	—	8.2.4	2026-02-10	3 versions
CVE-2025-10059US	—	0.29% (22nd)	—	7.0.18	2025-09-05	3 versions
CVE-2025-3085US	critical9.8	0.29% (21st)	—	7.0.16	2025-04-01	4 versions
CVE-2026-1850US	high7.5	0.28% (21st)	—	8.2.4	2026-02-10	2 versions
CVE-2026-1847US	high7.5	0.28% (21st)	—	7.0.29	2026-02-10	2 versions
CVE-2025-6711US	medium4.9	0.28% (20th)	—	8.0.5	2025-07-07	3 versions
CVE-2026-25613US	—	0.28% (20th)	—	7.0.29	2026-02-10	3 versions
CVE-2026-25610US	—	0.28% (20th)	—	7.0.29	2026-02-10	2 versions
CVE-2025-6706US	high8.8	0.26% (18th)	—	6.0.21	2025-06-26	3 versions
CVE-2024-7553US	high7.8	0.26% (18th)	—	7.0.12	2024-08-07	4 versions
CVE-2026-25612US	—	0.23% (13th)	—	8.2.4	2026-02-10	3 versions
CVE-2026-4147US	medium4.3	0.22% (13th)	—	8.2.6	2026-03-17	3 versions
CVE-2024-8207US	medium6.7	0.21% (10th)	—	6.0.3	2024-08-27	2 versions
CVE-2026-25609US	medium4.3OT elevated	0.20% (10th)	—	7.0.29	2026-02-10	3 versions
CVE-2025-3082US	medium5.4	0.20% (9th)	—	7.3.4	2025-04-01	4 versions
CVE-2025-6707US	medium5.4OT elevated	0.17% (7th)	—	7.0.21	2025-06-26	4 versions
CVE-2025-10491US	—	0.12% (2nd)	—	7.0.21	2025-09-15	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation3 CVEs
CWE-284Improper Access Control3 CVEs
CWE-285Improper Authorization3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-416Use After Free2 CVEs
CWE-617Reachable Assertion2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)41 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan