netVigilance Vulnerability intelligence since 2004

MongoDB

2 MongoDB vulnerabilities with confirmed exploitation in the wild, as published by CISA; 2 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for MongoDB
Vulnerability Status
overdue 234d2026-01-19 CVE-2025-14847 MongoDB / MongoDB and MongoDB Server MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability 2025-12-29 8.7 past due
overdue 1553d2022-06-10 CVE-2019-10758 MongoDB / mongo-express MongoDB mongo-express Remote Code Execution Vulnerability 2021-12-10 9.9 past due