Medium
CVE-2026-5170
A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during…
Medium
CVE-2026-4358
A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-fre…
High
CVE-2026-25610
An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.
High
CVE-2026-25613
An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compo…
Medium
CVE-2026-25609
Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read…
High
CVE-2026-1847
Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the o…