Product by Open Source
Mongodb Compass
10 known vulnerabilities in Mongodb Compass (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-96746 | Heap buffer overflow via mid-scan command list growth in client topology monitoring | 6.5 | |
| High | CVE-2026-96748 | Connection redirection via percent-encoded delimiter injection in connection string hosts | 6.5 | |
| High | CVE-2026-113870 | Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing | 8.8 | |
| High | CVE-2026-96749 | Heap out-of-bounds write via signed size overflow in BSON document encoding | 8.4 | |
| High | CVE-2026-96744 | MongoDB Laravel MongoDB (PHP): Improper Neutralization of Special Elements in Data Query Logic | 7.1 | |
| High | CVE-2026-115929 | MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs | 6.8 | |
| High | CVE-2026-96750 | Shell script injection via server-supplied database name in Open MongoDB shell | 7.1 | |
| Medium | CVE-2026-96745 | PHP object injection via unsuppressible __pclass class inference in command monitoring events | 5.6 | |
| High | CVE-2026-14881 | MongoDB Compass: OS Command Injection | 7.8 | |
| Medium | CVE-2026-96747 | Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption | 5.0 |