Exploited: 178
LatestCVE-2026-95731 — Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access
VulnFeed.org
AREN

MongoDB C Driver vulnerabilities and fixes

Exploited and high-severity MongoDB C Driver vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 8.7CVE-2026-120955MongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download_to_stream() Aborts Application on Malformed GridFS MetadataVerify fixMongoDB C Driver
    1 min read
  2. 7.1CVE-2026-120956remote abort and memory disclosure from a malformed cursor.nsVerify fixMongoDB C Driver
    1 min read
  3. 8.7CVE-2026-120678mongo-c-driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service)Verify fixMongoDB C Driver
    1 min read
  4. 7.6CVE-2026-114648NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keysFix availableMongoDB C# Driver
    1 min read
  5. 8.2CVE-2026-114644Memory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserializationFix availableMongoDB C# Driver
    1 min read
Esc