MongoDB Server vulnerabilities

5 CVEs affecting MongoDB Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-96299, published 2026-10-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-96299, published 2026-10-13. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed…
CVE-2026-104005, published 2026-10-13. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed…
CVE-2026-104004, published 2026-10-13. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is…
CVE-2026-96297, published 2026-10-13. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a…
CVE-2026-103965, published 2026-10-13. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with…