VENDOR

MongoDB vulnerabilities: CVEs, exploitation and patches

Every MongoDB CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

CVE-2026-93765
Mongoid unsafe reflection allows unauthenticated method invocation MongoDB Mongoid · Sep 30, 2026
CRITICAL 9.1
CVE-2026-19001
MongoDB BI Connector ODBC Driver buffer overflow in metadata functions MongoDB BI Connector ODBC Driver · Sep 29, 2026
- PATCH AVAILABLE
CRITICAL 9.8
CVE-2026-93762
Mongoid unsafe reflection data disclosure and deletion MongoDB Mongoid · Sep 29, 2026
CRITICAL 9.8