Serial number: AV26-918Date: September 14, 2026 As of September 11, 2026, MongoDB is affected by a vulnerability in the following product: MongoDB Server Prior to 7.0.43 Prior to 8.0.32 Prior to 8.3.11 Prior to 9.1.0-rc0 Prior to 9.0.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Shred collection validator constants during parsing Alerts | MongoDB
MongoDB CA
Aggiornamenti di sicurezza sanano una vulnerabilità con gravità "alta" che interessa MongoDB Server, sistema di gestione di basi di dati documentali utilizzato per archiviare, gestire ed elaborare grandi quantità di informazioni. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato autenticato, con privilegi di lettura/scrittura sul database, di compromettere la disponibilità del servizio e manipolare i dati sui sistemi interessati.
EPSS 0.00 CVE-2026-89099 MongoDB IT
De multiples vulnérabilités ont été découvertes dans MongoDB. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
EPSS 0.00 CVE-2026-88022 CVE-2026-88023 CVE-2026-88024 CVE-2026-88025 CVE-2026-88026 CVE-2026-88027 CVE-2026-88028 CVE-2026-88029 CVE-2026-88030 CVE-2026-88031 CVE-2026-88032 CVE-2026-88033 CVE-2026-88034 CVE-2026-88035 CVE-2026-88036 CVE-2026-89099 MongoDB FR
Serial Number: AV26-911Date: September 11, 2026 As of September 10, 2026, MongoDB is affected by vulnerabilities in the following products: Java Driver Prior to 5.11.1 Laravel MongoDB (PHP) Prior to 5.11.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. [PHPLARA-260] Query builder: force literal equality when 3-arg where uses '=' with an array value [JAVA-6276] Native heap use-after-free via…
MongoDB CA
Aggiornamenti di sicurezza sanano molteplici vulnerabilità, di cui 5 con gravità "alta", in prodotti MongoDB.
EPSS 0.00 CVE-2026-88022 CVE-2026-88026 CVE-2026-88027 CVE-2026-88028 CVE-2026-88032 MongoDB IT
De multiples vulnérabilités ont été découvertes dans MongoDB Server. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
MongoDB FR
De multiples vulnérabilités ont été découvertes dans MongoDB. Certaines d'entre elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une atteinte à l'intégrité des données et une injection de requêtes illégitimes par rebond (CSRF).
EPSS 0.00 CVE-2026-84962 CVE-2026-84963 CVE-2026-84964 CVE-2026-84965 CVE-2026-84966 CVE-2026-84967 CVE-2026-84968 CVE-2026-84969 CVE-2026-84970 CVE-2026-84971 MongoDB FR
Rilevate molteplici vulnerabilità, tra cui 6 con gravità “alta”, in varie librerie client per MongoDB. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato la modifica non autorizzata di dati o codice e la compromissione della disponibilità del servizio sui sistemi interessati.
EPSS 0.00 CVE-2026-75159 CVE-2026-81521 CVE-2026-81522 CVE-2026-81525 CVE-2026-81526 CVE-2026-81529 MongoDB IT
Rilevate cinque vulnerabilità, tra cui una con gravità “critica” e quattro con gravità “alta”, in MongoDB BI Connector ODBC Driver.
EPSS 0.00 CVE-2026-18888 CVE-2026-19001 CVE-2026-19002 CVE-2026-19003 CVE-2026-19004 MongoDB IT
Serial number: AV26-810Date: August 12, 2026 As of August 11, 2026, MongoDB is affected by vulnerabilities in the following products: MongoDB Driver Prior to 5.9.2 MongoDB Server Prior to 7.0.40 Prior to 8.0.29 Prior to 8.2.13 Prior to 8.3.8 Prior to 9.0.0-rc2 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. [SERVER-130264] Intra-cluster SASL mechanism allow list missing in egress connection setup,…
MongoDB CA
Rilevate molteplici vulnerabilità, tra cui una con gravità “critica” e 16 con gravità “alta”, in MongoDB Server e MongoDB Driver.
EPSS 0.00 CVE-2026-18687 CVE-2026-18688 CVE-2026-18690 CVE-2026-18691 CVE-2026-18692 CVE-2026-18693 CVE-2026-18694 CVE-2026-18695 CVE-2026-18696 CVE-2026-18697 CVE-2026-18701 CVE-2026-18704 CVE-2026-18705 CVE-2026-18706 CVE-2026-18710 CVE-2026-18711 CVE-2026-18712 MongoDB IT
Aikido's AI pentester found this file-access flaw in Rocket.Chat. A closer look at MongoDB's ObjectId showed the weak randomness that makes it exploitable. Category: Vulnerabilities & Threats
Executive Summary SentinelLABS has identified PCPJack, a credential theft framework that worms across exposed cloud infrastructure and removes artifacts associated with TeamPCP, a threat actor persona who claimed several high-profile supply chain intrusions throughout early 2026. The toolset harvests credentials from cloud, container, developer, productivity, and financial services, then exfiltrates the data through attacker-controlled infrastructure while attempting to spread to additional…