Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Database

MongoDb

MongoDB is a source-available cross-platform document-oriented database program. Classified as a NoSQL database product MongoDB utilizes JSON-like documents with optional schemas. MongoDB is developed by MongoDB Inc. and current versions are licensed under the Server Side Public License.

Official Site:

https://www.mongodb.com/

Severity Summary:

Critical: 4 High: 38 Medium: 93
Reference
Title
Severity
CVE-2026-13056
MongoDb Improperly Controlled Sequential Memory Allocation Vulnerability
Medium
CVE-2026-13066
MongoDb Access of Resource Using Incompatible Type (Type Confusion) Vulnerability
Medium
CVE-2026-13060
MongoDb Incorrect Authorization Vulnerability
Medium
CVE-2026-9741
MongoDb Cleartext Transmission of Sensitive Information Vulnerability
Medium
CVE-2026-13065
MongoDb NULL Pointer Dereference Vulnerability
Medium
CVE-2026-13064
MongoDb Inefficient Algorithmic Complexity Vulnerability
Medium
CVE-2026-13063
MongoDb Integer Overflow or Wraparound Vulnerability
Medium
CVE-2026-13062
MongoDb Unintended Proxy or Intermediary (Confused Deputy) Vulnerability
Medium
CVE-2026-13061
MongoDb Incorrect Authorization Vulnerability
Medium
CVE-2026-9743
MongoDb NULL Pointer Dereference Vulnerability
Medium
CVE-2026-9747
MongoDb Reachable Assertion Vulnerability
Medium
CVE-2026-9751
MongoDb Insertion of Sensitive Information into Log File Vulnerability
Medium
CVE-2026-13067
MongoDb Incorrect Authorization Vulnerability
Medium
CVE-2026-9749
MongoDb Reachable Assertion Vulnerability
Medium
CVE-2026-9748
MongoDb Reachable Assertion Vulnerability
Medium
CVE-2026-9750
MongoDb Reachable Assertion Vulnerability
Medium
CVE-2026-13070
MongoDb NULL Pointer Dereference Vulnerability
Medium
CVE-2026-9742
MongoDb Improper Validation of Specified Type of Input Vulnerability
Medium
CVE-2026-13058
MongoDb Reachable Assertion Vulnerability
Medium
CVE-2026-13057
MongoDb Improper Input Validation Vulnerability
Medium
CVE-2026-9754
MongoDb Use of Uninitialized Variable Vulnerability
Medium
CVE-2025-6711
MongoDb Insertion of Sensitive Information into Log File Vulnerability
Medium
CVE-2026-25609
MongoDb Missing Authorization Vulnerability
Medium
CVE-2019-20924
MongoDb Improper Check for Unusual or Exceptional Conditions Vulnerability
Medium
CVE-2022-24272
MongoDb Reachable Assertion Vulnerability
Medium
CVE-2013-1892
MongoDb Improper Input Validation Vulnerability
Medium
CVE-2013-2132
MongoDb Other Vulnerability
Medium
CVE-2016-6494
MongoDb Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2018-20802
MongoDb Other Vulnerability
Medium
CVE-2018-20803
MongoDb Loop with Unreachable Exit Condition (Infinite Loop) Vulnerability
Medium