Product by MongoDB
MongoDB libmongocrypt
7 known vulnerabilities in MongoDB libmongocrypt (MongoDB), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-106433 | Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt | 8.8 | |
| High | CVE-2026-106429 | Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt | 6.5 | |
| High | CVE-2026-84971 | Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path | 6.5 | |
| Medium | CVE-2026-114655 | KMS request injection via unsanitized key vault and provider values in libmongocrypt | 5.9 | |
| Medium | CVE-2026-106434 | Unrecognized payload acceptance in explicit decryption in MongoDB libmongocrypt | 4.3 | |
| Medium | CVE-2026-84962 | Authenticated KMS request forgery via CRLF injection in GCP key identifier strings | 4.2 | |
| Medium | CVE-2026-81523 | Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt | 4.4 |