agentprime: mongodb-inc-mongodb-server

agentprime: mongodb-inc-mongodb-serverEvery new CVE for mongodb-inc-mongodb-server.https://agentprime.io/CVE-2026-8843: Calling createIndex with certain index types can crash mongodhttps://agentprime.io/advisories/CVE-2026-8843/https://agentprime.io/advisories/CVE-2026-8843/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 May 2026 15:40:06 GMTCVECVE-2026-8202: Post-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operatorshttps://agentprime.io/advisories/CVE-2026-8202/https://agentprime.io/advisories/CVE-2026-8202/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 00:19:41 GMTCVECVE-2026-8336: Post-authentication use-after-free error in $_internalJsEmit and mapreduce commandshttps://agentprime.io/advisories/CVE-2026-8336/https://agentprime.io/advisories/CVE-2026-8336/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 00:16:16 GMTCVECVE-2026-8201: Use-After-Free in MongoDB FLE Query Analysis When Processing Positional Projections on Encrypted Fieldshttps://agentprime.io/advisories/CVE-2026-8201/https://agentprime.io/advisories/CVE-2026-8201/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 00:12:35 GMTCVECVE-2026-8200: Schema validation log messages may not redact user datahttps://agentprime.io/advisories/CVE-2026-8200/https://agentprime.io/advisories/CVE-2026-8200/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 00:08:29 GMTCVECVE-2026-8199: Post-auth memory exhaustion via bitwise match expressionshttps://agentprime.io/advisories/CVE-2026-8199/https://agentprime.io/advisories/CVE-2026-8199/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 00:05:22 GMTCVECVE-2026-8053: FlatBSON Duplicate Field Index Drifthttps://agentprime.io/advisories/CVE-2026-8053/https://agentprime.io/advisories/CVE-2026-8053/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 23:59:43 GMTCVECVE-2026-8063: Post-auth null pointer dereference when aggregating against a view with empty search pipelinehttps://agentprime.io/advisories/CVE-2026-8063/https://agentprime.io/advisories/CVE-2026-8063/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 04:12:54 GMTCVECVE-2026-4358: Memory safety issues in slot-based execution hash table spillhttps://agentprime.io/advisories/CVE-2026-4358/https://agentprime.io/advisories/CVE-2026-4358/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Mar 2026 19:00:07 GMTCVECVE-2026-4148: ExpressionContext use-after-free in classic engine $lookup and $graphLookup aggregation operatorshttps://agentprime.io/advisories/CVE-2026-4148/https://agentprime.io/advisories/CVE-2026-4148/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Mar 2026 15:53:57 GMTCVECVE-2026-4147: Stack memory disclosure in filemd5 commandhttps://agentprime.io/advisories/CVE-2026-4147/https://agentprime.io/advisories/CVE-2026-4147/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Mar 2026 15:50:21 GMTCVECVE-2026-25613: An unsafe cast in the MongoDB query planner can result in a segmentation fault.https://agentprime.io/advisories/CVE-2026-25613/https://agentprime.io/advisories/CVE-2026-25613/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 18:54:50 GMTCVECVE-2026-1849: Mongod can run out of stack memory when expressions create deeply nested documentshttps://agentprime.io/advisories/CVE-2026-1849/https://agentprime.io/advisories/CVE-2026-1849/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 18:52:52 GMTCVECVE-2026-1850: An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplificationhttps://agentprime.io/advisories/CVE-2026-1850/https://agentprime.io/advisories/CVE-2026-1850/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 18:49:32 GMTCVECVE-2026-25609: profile command may permit unauthorized configurationhttps://agentprime.io/advisories/CVE-2026-25609/https://agentprime.io/advisories/CVE-2026-25609/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 18:39:11 GMTCVECVE-2026-25610: Invalid $geoNear index hint may cause server crashhttps://agentprime.io/advisories/CVE-2026-25610/https://agentprime.io/advisories/CVE-2026-25610/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 18:30:40 GMTCVECVE-2026-1848: Connections received from the proxy port may not count towards total accepted connectionshttps://agentprime.io/advisories/CVE-2026-1848/https://agentprime.io/advisories/CVE-2026-1848/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 18:22:41 GMTCVECVE-2026-1847: MongoDB Server may crash when inserting large documentshttps://agentprime.io/advisories/CVE-2026-1847/https://agentprime.io/advisories/CVE-2026-1847/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 18:16:24 GMTCVECVE-2026-25612: Internal ResourceId collision may affect unrelated collectionshttps://agentprime.io/advisories/CVE-2026-25612/https://agentprime.io/advisories/CVE-2026-25612/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 18:05:23 GMTCVECVE-2026-25611: Pre-Authentication Memory Exhaustion Denial of Service in MongoDB Serverhttps://agentprime.io/advisories/CVE-2026-25611/https://agentprime.io/advisories/CVE-2026-25611/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 17:52:47 GMTCVECVE-2025-14847: Zlib compressed protocol header length confusion may allow memory readhttps://agentprime.io/advisories/CVE-2025-14847/https://agentprime.io/advisories/CVE-2025-14847/CVSS 8.7 (High). Critical: In CISA’s KEV catalogue since 29 Dec 2025: it is known to be exploited. CVSS score 8.7 (7.0 or more) and EPSS 0.83 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Dec 2025 11:00:22 GMTCVEcriticalKEVCVE-2025-14345: Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Serverhttps://agentprime.io/advisories/CVE-2025-14345/https://agentprime.io/advisories/CVE-2025-14345/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 15:00:38 GMTCVECVE-2025-13644: MongoDB may be susceptible to Invariant Failure due to batched deletehttps://agentprime.io/advisories/CVE-2025-13644/https://agentprime.io/advisories/CVE-2025-13644/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Nov 2025 05:23:12 GMTCVECVE-2025-13643: MongoDB Server may allow queries to be terminated by unauthorized usershttps://agentprime.io/advisories/CVE-2025-13643/https://agentprime.io/advisories/CVE-2025-13643/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Nov 2025 05:16:24 GMTCVECVE-2025-12893: Improper Certificate Validation May Allow Successful TLS Handshaking Despite Invalid Extended Key Usage Fields in MongoDB Serverhttps://agentprime.io/advisories/CVE-2025-12893/https://agentprime.io/advisories/CVE-2025-12893/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Nov 2025 05:07:17 GMTCVECVE-2025-13507: Time-series operations may cause internal BSON size limit to be exceedhttps://agentprime.io/advisories/CVE-2025-13507/https://agentprime.io/advisories/CVE-2025-13507/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Nov 2025 04:52:47 GMTCVECVE-2025-12657: Malformed KMIP response may result in access violationhttps://agentprime.io/advisories/CVE-2025-12657/https://agentprime.io/advisories/CVE-2025-12657/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Nov 2025 21:03:25 GMTCVECVE-2025-10491: MongoDB Windows installation MSI may leave ACLs unset on custom installation directorieshttps://agentprime.io/advisories/CVE-2025-10491/https://agentprime.io/advisories/CVE-2025-10491/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Sep 2025 16:04:54 GMTCVECVE-2025-10061: Malformed $group Query May Cause MongoDB Server to Crashhttps://agentprime.io/advisories/CVE-2025-10061/https://agentprime.io/advisories/CVE-2025-10061/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Sep 2025 20:48:25 GMTCVECVE-2025-10060: MongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operationhttps://agentprime.io/advisories/CVE-2025-10060/https://agentprime.io/advisories/CVE-2025-10060/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Sep 2025 20:39:14 GMTCVECVE-2025-10059: MongoDB Server router will crash when incorrect lsid is set on a sharded queryhttps://agentprime.io/advisories/CVE-2025-10059/https://agentprime.io/advisories/CVE-2025-10059/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Sep 2025 20:26:52 GMTCVECVE-2025-7259: Certain Queries with Duplicate _id Fields May Cause MongoDB Server to Crashhttps://agentprime.io/advisories/CVE-2025-7259/https://agentprime.io/advisories/CVE-2025-7259/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Jul 2025 15:59:01 GMTCVECVE-2025-6714: Incorrect Handling of incomplete data may prevent mongoS from Accepting New Connectionshttps://agentprime.io/advisories/CVE-2025-6714/https://agentprime.io/advisories/CVE-2025-6714/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Jul 2025 14:48:48 GMTCVECVE-2025-6713: MongoDB Server may be susceptible to privilege escalation due to $mergeCursors stagehttps://agentprime.io/advisories/CVE-2025-6713/https://agentprime.io/advisories/CVE-2025-6713/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Jul 2025 14:46:36 GMTCVECVE-2025-6712: MongoDB Server may be susceptible to DoS due to Accumulated Memory Allocationhttps://agentprime.io/advisories/CVE-2025-6712/https://agentprime.io/advisories/CVE-2025-6712/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Jul 2025 14:44:38 GMTCVECVE-2025-6711: Incomplete Redaction of Sensitive Information in MongoDB Server Logshttps://agentprime.io/advisories/CVE-2025-6711/https://agentprime.io/advisories/CVE-2025-6711/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Jul 2025 14:42:16 GMTCVECVE-2025-6710: Pre-authentication Denial of Service Stack Overflow Vulnerability in JSON Parsing via Excessive Recursion in MongoDBhttps://agentprime.io/advisories/CVE-2025-6710/https://agentprime.io/advisories/CVE-2025-6710/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Jun 2025 14:09:29 GMTCVECVE-2025-6709: Pre-Authentication Denial of Service Vulnerability in MongoDB Server's OIDC Authenticationhttps://agentprime.io/advisories/CVE-2025-6709/https://agentprime.io/advisories/CVE-2025-6709/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Jun 2025 14:07:04 GMTCVECVE-2025-6707: Race condition in privilege cache invalidation cyclehttps://agentprime.io/advisories/CVE-2025-6707/https://agentprime.io/advisories/CVE-2025-6707/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Jun 2025 14:04:46 GMTCVECVE-2025-6706: Running certain aggregation operations with the SBE engine may lead to unexpected behavior on MongoDB Serverhttps://agentprime.io/advisories/CVE-2025-6706/https://agentprime.io/advisories/CVE-2025-6706/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Jun 2025 14:00:22 GMTCVECVE-2025-3085: MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revokedhttps://agentprime.io/advisories/CVE-2025-3085/https://agentprime.io/advisories/CVE-2025-3085/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Apr 2025 12:05:05 GMTCVECVE-2025-3084: MongoDB Server may crash due to improper validation of explain commandhttps://agentprime.io/advisories/CVE-2025-3084/https://agentprime.io/advisories/CVE-2025-3084/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Apr 2025 11:14:19 GMTCVECVE-2025-3083: Malformed MongoDB wire protocol messages may cause mongos to crashhttps://agentprime.io/advisories/CVE-2025-3083/https://agentprime.io/advisories/CVE-2025-3083/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Apr 2025 11:12:31 GMTCVECVE-2025-3082: User may override a view's collation and gain unauthorized access to underlying datahttps://agentprime.io/advisories/CVE-2025-3082/https://agentprime.io/advisories/CVE-2025-3082/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Apr 2025 11:08:06 GMTCVECVE-2025-0755: MongoDB C Driver bson library may be susceptible to buffer overflowhttps://agentprime.io/advisories/CVE-2025-0755/https://agentprime.io/advisories/CVE-2025-0755/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Mar 2025 09:01:04 GMTCVECVE-2024-10921: Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Serverhttps://agentprime.io/advisories/CVE-2024-10921/https://agentprime.io/advisories/CVE-2024-10921/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Nov 2024 16:04:04 GMTCVECVE-2024-8305: MongoDB Server secondaries may crash due to forced index constraintshttps://agentprime.io/advisories/CVE-2024-8305/https://agentprime.io/advisories/CVE-2024-8305/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Oct 2024 14:10:31 GMTCVECVE-2024-8654: MongoDB Server may access non-initialized region of memory leading to unexpected behaviourhttps://agentprime.io/advisories/CVE-2024-8654/https://agentprime.io/advisories/CVE-2024-8654/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Sep 2024 13:35:50 GMTCVECVE-2024-8207: MongoDB Server binaries may load potentially insecure shared libraries from specific relative pathshttps://agentprime.io/advisories/CVE-2024-8207/https://agentprime.io/advisories/CVE-2024-8207/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Aug 2024 11:28:06 GMTCVECVE-2024-6384: Backup files may be downloaded by underprivileged users in MongoDB Enterprise Serverhttps://agentprime.io/advisories/CVE-2024-6384/https://agentprime.io/advisories/CVE-2024-6384/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Aug 2024 14:22:22 GMTCVE