Behoben in
Version prüfen
mongod --versionCVEs, die 9.0 betreffen
| CVE | Titel | CVSS | Ausgenutzt | EPSS | Veröffentlicht |
|---|---|---|---|---|---|
| CVE-2026-118383 | Pre-authentication use-after-free in MongoDB Server replica set primary catch-up | 9.5 | 0.7% | 2026-11-11 | |
| CVE-2026-18691 | Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure | 9.0 | — | 2026-08-12 | |
| CVE-2026-18697 | Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos | 8.7 | — | 2026-08-12 | |
| CVE-2026-18692 | Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Exec... | 7.7 | — | 2026-08-12 | |
| CVE-2026-89099 | Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption | 7.7 | — | 2026-09-12 | |
| CVE-2026-82053 | Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role Assignment | 7.6 | — | 2026-09-09 | |
| CVE-2026-18706 | Use-After-Free in MongoDB $graphLookup Aggregation Stage Leads to Denial of Service and Potential Remote Code... | 7.5 | — | 2026-08-12 | |
| CVE-2026-18690 | Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections | 7.2 | — | 2026-08-12 | |
| CVE-2026-18693 | Out-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory... | 7.2 | — | 2026-08-12 | |
| CVE-2026-18712 | Improper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification... | 7.2 | — | 2026-08-12 | |
| CVE-2026-9737 | Find command with $meta sort can lead to crash | 7.1 | — | 2026-07-23 | |
| CVE-2026-18687 | Improper Validation in MongoDB Queryable Encryption Maintenance Operation Leads to Denial of Service and Index... | 7.1 | — | 2026-08-12 | |
| CVE-2026-18688 | Out-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory Disclosure | 7.1 | — | 2026-08-12 | |
| CVE-2026-18694 | Out-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disc... | 7.1 | — | 2026-08-12 | |
| CVE-2026-18695 | Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service | 7.1 | — | 2026-08-12 | |
| CVE-2026-18701 | Type Confusion in MongoDB Query Subsystem Leads to Denial of Service | 7.1 | — | 2026-08-12 | |
| CVE-2026-18705 | Improper Authorization in MongoDB Atlas Vector Search Allows Unauthorized Access to Protected View Data | 7.1 | — | 2026-08-12 | |
| CVE-2026-18711 | Use-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure | 7.1 | — | 2026-08-12 | |
| CVE-2026-82054 | Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service | 7.1 | — | 2026-09-09 | |
| CVE-2026-82070 | Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface | 7.1 | — | 2026-09-09 | |
| CVE-2026-82076 | Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Server | 7.1 | — | 2026-09-09 | |
| CVE-2026-18696 | Improper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections | 7.0 | — | 2026-08-12 | |
| CVE-2026-18699 | Improper Input Validation in MongoDB Query Planner Leads to Denial of Service | 6.0 | — | 2026-08-12 | |
| CVE-2026-18700 | Use-After-Free in MongoDB Geospatial Validation Leads to Denial of Service | 6.0 | — | 2026-08-12 | |
| CVE-2026-18709 | Missing Authorization in MongoDB Sharded Transaction Commit/Abort Handling Leads to Cross-Shard Data Inconsist... | 5.9 | — | 2026-08-12 | |
| CVE-2026-18698 | Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Co... | 5.3 | — | 2026-08-12 | |
| CVE-2026-18702 | Improper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic S... | 5.3 | — | 2026-08-12 | |
| CVE-2026-18707 | Improper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service | 5.3 | — | 2026-08-12 | |
| CVE-2026-18708 | Improper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Ex... | 5.3 | — | 2026-08-12 | |
| CVE-2026-18703 | Improper Enforcement of Authentication Mechanism Restrictions in MongoDB Server Allows Use of Disabled Authent... | 2.3 | — | 2026-08-12 |
Verfolgen Sie diese Versionen auf Ihren eigenen Servern
InfraGuard erfasst die installierten Softwareversionen auf jedem Server und markiert diejenigen mit bekannten Schwachstellen. Self-Hosted – nichts verlässt Ihr Netzwerk.
Daten: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (siehe EPSS unter https://www.first.org/epss), endoflife.date. Softwareliste: awesome-selfhosted (CC BY-SA 3.0).