MongoDB: exploited vulnerabilities
- 2exploited vulnerabilities
- 0used by ransomware
- Dec 29, 2025latest one added
- MongoDB and MongoDB Server 1
- mongo-express 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Dec 29, 2025 | and MongoDB Server Improper Handling of Length Parameter Inconsistency | MongoDB and MongoDB Server | High 8.7 | 83% |
| Dec 10, 2021 | Remote Code Execution | mongo-express | Critical 9.9 | 85% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.