CERT-FR: Multiple MongoDB Vulnerabilities

CERT-FR Security Advisories

Published March 18th, 2026

Detected March 18th, 2026

Summary

CERT-FR has issued a security advisory regarding multiple vulnerabilities discovered in MongoDB. The advisory details affected versions and directs users to MongoDB's security bulletins for patch information. The specific risk is not detailed by the publisher.

View original document View source feed page

What changed

CERT-FR, the French national cybersecurity agency, has published an advisory (CERTFR-2026-AVI-0310) detailing multiple vulnerabilities found in various versions of MongoDB Core Server. The advisory cites MongoDB's own security bulletins (SERVER-119317 and SERVER-119319) but does not specify the exact nature or severity of the risk, stating only that an attacker could "provoke a security problem." Affected versions include those prior to 7.0.31, 8.0.20, 8.2.6, and 8.3.

Organizations utilizing MongoDB should immediately consult the referenced MongoDB security bulletins and apply the necessary patches or updates to mitigate potential security risks. While CERT-FR does not specify a compliance deadline or penalty, failure to address known vulnerabilities can lead to data breaches, system compromise, and significant operational disruption. It is recommended that IT security teams review their MongoDB deployments and prioritize the application of available fixes.

What to do next

Review MongoDB security bulletins SERVER-119317 and SERVER-119319.
Identify affected MongoDB Core Server versions within the organization.
Apply vendor-provided patches and updates to mitigate identified vulnerabilities.

Source document (simplified)

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 18 mars 2026 N° CERTFR-2026-AVI-0310 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans MongoDB

Gestion du document

Risque

Non spécifié par l'éditeur

Systèmes affectés

Core Server versions antérieures à 7.0.31
Core Server versions antérieures à 8.0.20
Core Server versions antérieures à 8.2.6
Core Server versions antérieures à 8.3

Résumé

De multiples vulnérabilités ont été découvertes dans MongoDB. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.