{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/mongodb-server-versions--9.1.0-rc1024/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:mongodb:server:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":5.4,"id":"CVE-2026-103965"},{"cvss":6.5,"id":"CVE-2026-104004"},{"cvss":6.5,"id":"CVE-2026-104005"},{"cvss":6.5,"id":"CVE-2026-96297"},{"cvss":6.5,"id":"CVE-2026-96299"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["MongoDB Server (versions \u003c 7.0.45)","MongoDB Server (versions \u003c 8.0.34)","MongoDB Server (versions \u003c 8.3.13)","MongoDB Server (versions \u003c 9.0.0-rc2)","MongoDB Server (versions \u003c 9.1.0-rc1024)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["MongoDB"],"content_html":"\u003cp\u003eThe French National Cybersecurity Agency (ANSSI) has reported multiple vulnerabilities affecting various branches of MongoDB Server. These vulnerabilities, identified as CVE-2026-103965, CVE-2026-104004, CVE-2026-104005, CVE-2026-96297, and CVE-2026-96299, present significant security risks, including the potential for remote arbitrary code execution (RCE) and denial of service (DoS). The affected versions include MongoDB Server 7.x prior to 7.0.45, 8.0.x prior to 8.0.34, 8.3.x prior to 8.3.13, 9.0.x prior to 9.0.0-rc2, and 9.1.x prior to 9.1.0-rc1024. Organizations using these versions are encouraged to audit their database deployments and apply the security patches provided by MongoDB as soon as possible to mitigate the risk of exploitation.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of these vulnerabilities could result in a complete system compromise via remote arbitrary code execution or service disruption through denial of service. The scope of impact includes any infrastructure running the vulnerable MongoDB Server versions, potentially leading to unauthorized data access, system takeover, or operational downtime across business-critical database environments.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade all affected MongoDB Server instances to the patched versions specified in the vendor's security bulletins (SERVER-130431, SERVER-131411, SERVER-131412, SERVER-132946, SERVER-134618).\u003c/li\u003e\n\u003cli\u003eReview the official MongoDB JIRA project documentation linked in the references for detailed remediation steps for each identified CVE.\u003c/li\u003e\n\u003cli\u003eRestrict network access to MongoDB instances to authorized clients only to minimize the attack surface while update procedures are scheduled.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-14T16:21:33Z","date_published":"2026-10-14T16:21:33Z","id":"https://feed.craftedsignal.io/briefs/2026-10-mongodb-vulnerabilities/","summary":"Multiple vulnerabilities, including CVE-2026-103965, CVE-2026-104004, CVE-2026-104005, CVE-2026-96297, and CVE-2026-96299, in MongoDB Server allow remote attackers to achieve arbitrary code execution or denial of service.","title":"Multiple Vulnerabilities in MongoDB Server","url":"https://feed.craftedsignal.io/briefs/2026-10-mongodb-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - MongoDB Server (Versions \u003c 9.1.0-Rc1024)","version":"https://jsonfeed.org/version/1.1"}