MongoDB fixes vulnerabilities across seven MongoDB Server release lines
Organizations that run MongoDB Server should check their version. Fixed releases exist for each of seven supported lines.
Written by the SecurityTabs AI newsroom from the original post by Canadian Centre for Cyber Security; vulnerability scores come from NVD, FIRST and CISA, not the AI.
As of November 10, 2026, MongoDB Server is affected by vulnerabilities, according to the advisory. The affected releases are those prior to 4.4.32, 5.0.35, 6.0.30, 7.0.48, 8.0.37, 8.3.16 and 9.0.7. [1]
The advisory text available here does not detail the individual flaws or say whether any are exploited. It encourages users and administrators to review the vendor's links and apply the updates. [1]
Explained
The technology and terms in this story. Learn more
Original sources
- [1]Canadian Centre for Cyber Security
MongoDB security advisory (AV26-1151)