Comprueba tu versión
mongod --versionCVE que afectan a 2.6
| CVE | Título | CVSS | Explotada | EPSS | Publicación |
|---|---|---|---|---|---|
| CVE-2016-3104 | mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service... | 7.5 | — | 2017-04-15 | |
| CVE-2026-9753 | Server crash via malformed binary diff passed to $_internalApplyOplogUpdate. | 7.2 | — | 2026-06-10 | |
| CVE-2016-6494 | The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users... | 5.5 | — | 2016-10-04 | |
| CVE-2021-32036 | Denial of Service and Data Integrity vulnerability in features command | 5.4 | — | 2022-02-05 | |
| CVE-2014-3971 | The CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoD... | 5.0 | — | 2014-12-25 | |
| CVE-2015-1609 | MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service via a crafte... | 5.0 | — | 2015-03-30 |
Controla estas versiones en tus propios servidores
InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.
Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).