Do Son MongoDB patched critical MongoDB driver vulnerabilities across its ecosystem. Update your drivers to resolve these MongoDB driver vulnerabilities now.
mongodb
Critical MongoDB driver vulnerabilities, including CVE-2026-93762, expose systems to data loss and DoS. Learn about these flaws and patch immediately.
MongoDB fixed 24 MongoDB Server vulnerabilities, including a critical auth bypass (CVE-2026-82067) and unauthenticated denial of service flaws. Patch now.
Discover the details of recent MongoDB security vulnerabilities affecting drivers and BI connectors. Update your systems to patch CVE-2026-81525 and others.
CVE-2026-19001 (CVSS 9.5) headlines 32 MongoDB security vulnerabilities, including a BI Connector ODBC Driver flaw enabling arbitrary code execution.
MongoDB patched 27 vulnerabilities across Server and Compass. The set includes memory corruption, RBAC bypass, and denial-of-service flaws. Update now.
A MongoDB Server vulnerability chain, including a use-after-free flaw (CVE-2026-11933), lets attackers crash servers or leak memory. Patch now.
Urgent: A memory corruption flaw in MongoDB time-series collections (CVE-2026-8053) enables server takeover. Patch to versions 8.3.2, 8.0.23, or 7.0.34 now.
MongoDB patches high-severity flaw CVE-2026-25611. Unauthenticated attackers can crash servers via memory exhaustion. Update to v8.2.4 or v8.0.18 now.
CISA adds MongoBleed (CVE-2025-14847) to its KEV Catalog after confirming active exploitation. 80,000+ MongoDB servers are at risk. Patch by Jan 19!
Ubisoft takes Rainbow Six Siege offline after a massive backend breach. Hackers gifted 2 billion credits to players and hijacked the game's ban system.
MongoBleed (CVE-2025-14847) allows unauthenticated MongoDB memory leaks. With Joe Desimone's PoC released, upgrade to v8.0.17 or v7.0.28 now!
MongoDB CVE-2025-14847: A high-severity flaw in zlib compression allows unauthenticated attackers to read sensitive heap memory. Upgrade to v8.2.3+!
MongoDB has patched two flaws: CVE-2025-6713 (CVSS 7.7) allows privilege escalation via $mergeCursors, and CVE-2025-6714 (CVSS 7.5) causes mongos DoS.
MongoDB discloses CVE-2025-6710 (CVSS 7.5), a pre-authentication DoS flaw. Crafted JSON inputs can crash servers via stack overflow.
MongoDB has released patches addressing three newly disclosed vulnerabilities that could expose deployments to DoS & authentication bypass attacks
CVE-2025-0755 revealed: discover how a buffer overflow vulnerability can impact your MongoDB applications and what to do.
Learn about CVE-2025-26701, a critical security vulnerability in PMM that allows unauthorized root access to database environments.
The newly discovered CVE-2025-27017 impacts Apache NiFi versions and reveals risks to sensitive MongoDB credentials.
The vulnerability, identified as CVE-2024-6376, stems from insufficient sandbox protection settings within the ejson shell parser
In light of this incident, MongoDB recommends that all clients remain vigilant against social engineering and phishing attacks
Identified as CVE-2023-49954, this security loophole is an SQL Injection flaw found in 3CX CRM Integration.