Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Database

MongoDb

MongoDB is a source-available cross-platform document-oriented database program. Classified as a NoSQL database product MongoDB utilizes JSON-like documents with optional schemas. MongoDB is developed by MongoDB Inc. and current versions are licensed under the Server Side Public License.

Official Site:

https://www.mongodb.com/

Severity Summary:

Critical: 4 High: 38 Medium: 93
Reference
Title
Severity
CVE-2026-1849
MongoDb Uncontrolled Recursion Vulnerability
High
CVE-2015-7882
MongoDb Improper Authentication Vulnerability
High
CVE-2019-20925
MongoDb Incorrect Comparison Vulnerability
High
CVE-2026-13072
MongoDb Heap-based Buffer Overflow Vulnerability
High
CVE-2021-32036
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability
High
CVE-2026-13077
MongoDb Out-of-bounds Read Vulnerability
High
CVE-2026-13078
MongoDb Missing Authorization Vulnerability
High
CVE-2020-7925
MongoDb Improper Input Validation Vulnerability
High
CVE-2019-2390
MongoDb Vulnerability
High
CVE-2019-2386
MongoDb Insufficient Session Expiration Vulnerability
High
CVE-2026-13059
MongoDb Reliance on Untrusted Inputs in a Security Decision Vulnerability
High
CVE-2023-1409
MongoDb Improper Certificate Validation Vulnerability
High
CVE-2026-9752
MongoDb NULL Pointer Dereference Vulnerability
Medium
CVE-2026-6915
MongoDb Improper Validation of Specified Quantity in Input Vulnerability
Medium
CVE-2026-13055
MongoDb Reachable Assertion Vulnerability
Medium
CVE-2026-8202
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2026-8336
MongoDb Use After Free Vulnerability
Medium
CVE-2026-8199
MongoDb Improperly Controlled Sequential Memory Allocation Vulnerability
Medium
CVE-2026-8063
MongoDb NULL Pointer Dereference Vulnerability
Medium
CVE-2026-9735
MongoDb Insertion of Sensitive Information into Log File Vulnerability
Medium
CVE-2026-13076
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2026-9746
MongoDb Reachable Assertion Vulnerability
Medium
CVE-2026-4147
MongoDb Use of Uninitialized Resource Vulnerability
Medium
CVE-2026-13075
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2026-13074
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2026-13068
MongoDb Incorrect Authorization Vulnerability
Medium
CVE-2026-5170
MongoDb Reachable Assertion Vulnerability
Medium
CVE-2026-13073
MongoDb Reachable Assertion Vulnerability
Medium
CVE-2026-13069
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2026-8200
MongoDb Insertion of Sensitive Information into Log File Vulnerability
Medium