Sploitus

95 exploited vulnerabilities in Mongodb

Showing 1–50 of 95, highest-scoring first

Vendors
Budibase, Apache, Amazon, Elastic, Mongodb, Opensuse
With known exploits
95
Affected Budibase versions
< 3.39.12
Affected Golang Net versions
< 0.55.0
Affected Golang Crypto versions
< 0.52.0
Affected Mongodb versions
< 4.4.30, 5.0.32, 6.0.27, 7.0.28, 8.0.17, 8.2.3, 5.0.33, 6.0.28, 7.0.34, 8.0.23, 8.2.9, 8.3.2, 7.0.29, 8.0.18, 8.2.4, 7.0.35, 8.0.24, 8.2.10, 8.3.3, 3.0.6, 5.0.31, 6.0.20, 7.0.16, 7.0.31, 8.0.20, 8.2.6
Affected fit2cloud Jumpserver versions
< 2.28.20, 3.7.1
Affected Nagios Nagios Xi versions
≤ 2026

Vulnerabilities with exploits

Highest CVSS first — 6 of these already have exploit code on Sploitus

CVE-2026-54350 1 exploit
CVSS 10.0 CRITICAL 2026-06-23FIX AVAILABLE
Exploit for Improper Neutralization of Special Elements in Data Query Logic in Budibase
CVE-2026-42506
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-42502
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-25680
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-46598
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-46597
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-39828
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-39827
CVSS 9.8 CRITICAL 2026-05-22
CVE-2025-14847 38 exploits
CVSS 9.8 CRITICAL 2025-12-19FIX AVAILABLE
Exploit for Improper Handling of Length Parameter Inconsistency in MongodbExploit for SQL Injection in Mjdm Majordomo
CVE-2025-3085
CVSS 9.8 CRITICAL 2024-10-01FIX AVAILABLE
CVE-2024-8654
CVSS 9.8 CRITICAL 2024-09-10
CVE-2024-1351
CVSS 9.8 CRITICAL 2024-03-07FIX AVAILABLE
CVE-2023-36475
CVSS 9.8 CRITICAL 2023-06-28FIX AVAILABLE
CVE-2022-39396
CVSS 9.8 CRITICAL 2022-11-08FIX AVAILABLE
CVE-2026-57898
CVSS 9.0 CRITICAL 2026-07-14FIX AVAILABLE
CVE-2026-8053 1 exploit
CVSS 9.0 HIGH 2026-05-05FIX AVAILABLE
Exploit for CVE-2026-8053
CVE-2023-43651
CVSS 9.0 HIGH 2023-09-27FIX AVAILABLE
CVE-2026-8201
CVSS 8.8 HIGH 2026-05-13FIX AVAILABLE
CVE-2026-4148
CVSS 8.8 HIGH 2026-03-17
CVE-2025-34227 1 exploit
CVSS 8.8 HIGH 2025-09-25FIX AVAILABLE
📄 Nagios XI Monitoring Wizard Command Injection
CVE-2025-6706
CVSS 8.8 HIGH 2025-06-26FIX AVAILABLE
CVE-2026-33539
CVSS 8.6 HIGH 2026-03-24FIX AVAILABLE
CVE-2025-0755
CVSS 8.4 HIGH 2024-09-04FIX AVAILABLE
CVE-2026-9742
CVSS 8.2 HIGH 2026-06-09
CVE-2026-1848
CVSS 8.2 HIGH 2026-02-10
CVE-2026-9753
CVSS 8.1 HIGH 2026-06-09
CVE-2024-10921
CVSS 8.1 HIGH 2024-10-30FIX AVAILABLE
CVE-2015-7882 2 exploits
CVSS 8.1 HIGH 2019-07-19FIX AVAILABLE
mongoaudit - A Powerful MongoDB Auditing and Pentesting ToolMongoDB Security Audit: mongoaudit
CVE-2025-10060
CVSS 7.8 HIGH 2024-10-04FIX AVAILABLE
CVE-2025-6714
CVSS 7.8 HIGH 2025-07-07FIX AVAILABLE
CVE-2025-6710
CVSS 7.8 HIGH 2025-06-26FIX AVAILABLE
CVE-2025-6709
CVSS 7.8 HIGH 2025-06-26FIX AVAILABLE
CVE-2025-3083
CVSS 7.8 HIGH 2025-04-01FIX AVAILABLE
CVE-2024-7553
CVSS 7.8 HIGH 2024-08-07FIX AVAILABLE
CVE-2026-54313
CVSS 7.7 HIGH 2026-06-16FIX AVAILABLE
CVE-2026-8336
CVSS 7.7 HIGH 2026-05-13FIX AVAILABLE
CVE-2025-6713
CVSS 7.7 HIGH 2025-07-07FIX AVAILABLE
CVE-2025-3082
CVSS 7.6 HIGH 2024-10-01FIX AVAILABLE
CVE-2026-6914
CVSS 7.5 HIGH 2026-04-29FIX AVAILABLE
CVE-2026-4358
CVSS 7.5 HIGH 2026-02-03
CVE-2026-1850
CVSS 7.5 HIGH 2026-02-10
CVE-2026-1849
CVSS 7.5 HIGH 2026-02-10
CVE-2026-1847
CVSS 7.5 HIGH 2026-02-10
CVE-2025-13644
CVSS 7.5 HIGH 2025-02-21FIX AVAILABLE
CVE-2025-61301 1 exploit
CVSS 7.5 HIGH 2025-10-20FIX AVAILABLE
Exploit for CVE-2025-61301
CVE-2024-3372
CVSS 7.5 HIGH 2024-05-14FIX AVAILABLE
CVE-2023-1409
CVSS 7.5 HIGH 2023-03-02FIX AVAILABLE
CVE-2026-9754
CVSS 7.1 HIGH 2026-06-09
CVE-2026-9752
CVSS 7.1 HIGH 2026-06-09
CVE-2026-9750
CVSS 7.1 HIGH 2026-06-09