InfraGuard
Sign in Try it now Buy now

MongoDB 3.2 vulnerabilities

3 known CVEs affect the 3.2 line of MongoDB.

7.2 max CVSSSupport ended 2018-09-30

Fixed in

3.2.14
Check your versionmongod --version

CVEs affecting 3.2

CVE Title CVSS Exploited EPSS Published
CVE-2026-9753 Server crash via malformed binary diff passed to $_internalApplyOplogUpdate. 7.2 — 2026-06-10
CVE-2016-6494 The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users... 5.5 — 2016-10-04
CVE-2021-32036 Denial of Service and Data Integrity vulnerability in features command 5.4 — 2022-02-05

Track these versions on your own servers

InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.

Try the live demo Buy now

Weekly exploited-vulnerability digest

The KEV additions that matter for self-hosted servers, once a week. No other mail.

Data: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (see EPSS at https://www.first.org/epss), endoflife.date. Software list: awesome-selfhosted (CC BY-SA 3.0).