CVE-2026-11933

MongoDB Patches 27 Vulnerabilities, Including Memory Corruption, RBAC Bypass, and a Compass Command Injection MongoDB vulnerabilities dashboard showing memory corruption and denial of service flaws across MongoDB Server and Compass

MongoDB vulnerabilities dashboard showing memory corruption and denial of service flaws across MongoDB Server and Compass

MongoDB Patches 27 Vulnerabilities, Including Memory Corruption, RBAC Bypass, and a Compass Command Injection

Do Son July 30, 2026

TL;DR MongoDB disclosed 27 vulnerabilities across MongoDB Server and the Compass GUI client. Most are denial-of-service bugs,...

MongoDB Server Vulnerability Wave Hits Document Databases MongoDB Server vulnerability use-after-free vulnerability, CVE-2026-11933, CVE-2026-9740, CVE-2026-9750 MongoDB DoS, Pre-Authentication Vulnerability CVE-2024-7553 - MongoDB Server CVE-2025-3083, CVE-2025-3084, and CVE-2025-3085

MongoDB Server vulnerability use-after-free vulnerability, CVE-2026-11933, CVE-2026-9740, CVE-2026-9750 MongoDB DoS, Pre-Authentication Vulnerability CVE-2024-7553 - MongoDB Server CVE-2025-3083, CVE-2025-3084, and CVE-2025-3085

MongoDB Server Vulnerability Wave Hits Document Databases

Do Son June 17, 2026

A fresh MongoDB Server vulnerability cluster has surfaced, and it puts widely used document databases at real...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-71479CVSS 9.1
Multiple billing paths multiplied user-controlled quantity parameters into the quota calculation without an upper bound or overflow-safe integer...
Admin intel📅 Updated: Aug 18, 2026
CVE-2025-62593CVSS 9.4
Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool...
CISA KEV📅 Added to KEV: Aug 17, 2026
CVE-2026-59309CVSS 9.8
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to...
Admin intel📅 Updated: Aug 15, 2026
CVE-2026-65400CVSS 9.8
An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS...
Admin intel📅 Updated: Aug 15, 2026
CVE-2026-15826CVSS 9.8
The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up...
Admin intel📅 Updated: Aug 15, 2026
CVE-2026-72898CVSS 10.0
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator...
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-20349CVSS 8.6
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-68820CVSS 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CISA KEV📅 Added to KEV: Aug 11, 2026