Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Database

MongoDb

MongoDB is a source-available cross-platform document-oriented database program. Classified as a NoSQL database product MongoDB utilizes JSON-like documents with optional schemas. MongoDB is developed by MongoDB Inc. and current versions are licensed under the Server Side Public License.

Official Site:

https://www.mongodb.com/

Severity Summary:

Critical: 4 High: 35 Medium: 88
Reference
Title
Severity
CVE-2026-1847
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability
High
CVE-2025-6710
MongoDb Uncontrolled Recursion Vulnerability
High
CVE-2026-4358
MongoDb Double Free Vulnerability
High
CVE-2026-4148
MongoDb Use After Free Vulnerability
High
CVE-2025-6714
MongoDb Excessive Iteration Vulnerability
High
CVE-2019-2390
MongoDb Vulnerability
High
CVE-2019-2386
MongoDb Insufficient Session Expiration Vulnerability
High
CVE-2019-20925
MongoDb Incorrect Comparison Vulnerability
High
CVE-2024-10921
MongoDb Improper Neutralization of Null Byte or NUL Character Vulnerability
High
CVE-2026-6915
MongoDb Improper Validation of Specified Quantity in Input Vulnerability
Medium
CVE-2026-8063
MongoDb NULL Pointer Dereference Vulnerability
Medium
CVE-2026-4147
MongoDb Use of Uninitialized Resource Vulnerability
Medium
CVE-2026-8199
MongoDb Improperly Controlled Sequential Memory Allocation Vulnerability
Medium
CVE-2026-8336
MongoDb Use After Free Vulnerability
Medium
CVE-2026-25609
MongoDb Missing Authorization Vulnerability
Medium
CVE-2026-5170
MongoDb Reachable Assertion Vulnerability
Medium
CVE-2026-9743
MongoDb NULL Pointer Dereference Vulnerability
Medium
CVE-2026-8202
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2026-13068
MongoDb Incorrect Authorization Vulnerability
Medium
CVE-2026-13056
MongoDb Improperly Controlled Sequential Memory Allocation Vulnerability
Medium
CVE-2026-13057
MongoDb Improper Input Validation Vulnerability
Medium
CVE-2026-13058
MongoDb Reachable Assertion Vulnerability
Medium
CVE-2026-13060
MongoDb Incorrect Authorization Vulnerability
Medium
CVE-2026-13061
MongoDb Incorrect Authorization Vulnerability
Medium
CVE-2026-13062
MongoDb Unintended Proxy or Intermediary (Confused Deputy) Vulnerability
Medium
CVE-2026-13063
MongoDb Integer Overflow or Wraparound Vulnerability
Medium
CVE-2026-13064
MongoDb Inefficient Algorithmic Complexity Vulnerability
Medium
CVE-2026-13065
MongoDb NULL Pointer Dereference Vulnerability
Medium
CVE-2026-13066
MongoDb Access of Resource Using Incompatible Type (Type Confusion) Vulnerability
Medium
CVE-2026-13067
MongoDb Incorrect Authorization Vulnerability
Medium