Skip to content
Threat Feed
Subscribe
high advisory

MongoDB: Multiple vulnerabilities (CVE-2026-116641, CVE-2026-118510, CVE-2026-118581)

Multiple vulnerabilities in MongoDB Database Tools, Java Driver, and Laravel MongoDB may lead to data integrity compromise, SQL injection, and security policy bypass.

CVE search metadata

CVE search record: CVE-2026-116641. Severity: medium. CVSS: 6.8. EPSS: 0.14%. KEV: no. Product: Database Tools (< 100.20.0), Java Driver (< 5.14.0), Laravel MongoDB (< 5.12.0). Brief: MongoDB: Multiple vulnerabilities (CVE-2026-116641, CVE-2026-118510, CVE-2026-118581). Brief link: https://feed.craftedsignal.io/briefs/2026-10-mongodb-vulns/

CVE search record: CVE-2026-118510. KEV: no. Product: Database Tools (< 100.20.0), Java Driver (< 5.14.0), Laravel MongoDB (< 5.12.0). Brief: MongoDB: Multiple vulnerabilities (CVE-2026-116641, CVE-2026-118510, CVE-2026-118581). Brief link: https://feed.craftedsignal.io/briefs/2026-10-mongodb-vulns/

CVE search record: CVE-2026-118581. KEV: no. Product: Database Tools (< 100.20.0), Java Driver (< 5.14.0), Laravel MongoDB (< 5.12.0). Brief: MongoDB: Multiple vulnerabilities (CVE-2026-116641, CVE-2026-118510, CVE-2026-118581). Brief link: https://feed.craftedsignal.io/briefs/2026-10-mongodb-vulns/

Triage facts

Revision 2
Applicability
Database Tools (< 100.20.0), Java Driver (< 5.14.0) +1
Evidence
Unknown
Severity
High
Action
Elevated
Sources
10 public sources
Freshness
Revision 2Oct 30, 21:33 UTC
Vulnerabilities
3 CVEs
Source quality
A1Likely
Revision history 1 entry · Revision 2
  1. Revision 2

    added coverage for Laravel MongoDB (< 5.12.0)

    Changed: action_plan, lastmod, references, tags, updates

    Sources: 1

Multiple vulnerabilities have been identified across several MongoDB components. These flaws may allow an attacker to compromise data integrity, perform SQL injection (SQLi), and bypass established security policies. The affected products include MongoDB Database Tools, Java Driver, and Laravel MongoDB. Users and administrators are advised to apply the patches provided in the referenced vendor security bulletins.

Impact

Successful exploitation may result in unauthorized data modification, injection of malicious SQL commands, or bypassing intended security controls within the affected MongoDB environments.

Recommendation

  • Inventory all systems running MongoDB Database Tools, MongoDB Java Driver, or the Laravel MongoDB integration.
  • Upgrade MongoDB Database Tools to version 100.20.0 or later.
  • Upgrade MongoDB Java Driver to version r5.14.0 or later.
  • Upgrade Laravel MongoDB to version 5.12.0 or later.
  • Review application logs for anomalous SQL queries or unauthorized access patterns following the upgrade.

Immediate actions

Patch affected MongoDB products to specified versions

IT Operations 48h

Threat Hunt

Search application logs for unexpected SQL syntax or SQLi patterns targeting MongoDB connections

medium medium confidence hunt now

Data: Application logs, Database proxy logs

Mitigations

Upgrade to Database Tools 100.20.0, Java Driver r5.14.0, and Laravel MongoDB 5.12.0

immediate IT Operations

CVE-2026-116641, CVE-2026-118510, CVE-2026-118581

Upgrade Laravel MongoDB to version 5.12.0 or later.

immediate IT Operations

Laravel MongoDB (< 5.12.0)