Check your version
mongod --versionCVEs affecting 2.2
| CVE | Title | CVSS | Exploited | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-9753 | Server crash via malformed binary diff passed to $_internalApplyOplogUpdate. | 7.2 | — | 2026-06-10 | |
| CVE-2012-6619 | The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticate... | 6.4 | — | 2014-03-07 | |
| CVE-2013-1892 | MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function i... | 6.0 | — | 2013-10-02 | |
| CVE-2016-6494 | The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users... | 5.5 | — | 2016-10-04 | |
| CVE-2021-32036 | Denial of Service and Data Integrity vulnerability in features command | 5.4 | — | 2022-02-05 | |
| CVE-2015-1609 | MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service via a crafte... | 5.0 | — | 2015-03-30 | |
| CVE-2013-2132 | bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context... | 4.3 | — | 2013-08-16 |
Track these versions on your own servers
InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.
Data: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (see EPSS at https://www.first.org/epss), endoflife.date. Software list: awesome-selfhosted (CC BY-SA 3.0).