What’s Vulnerable › Products

MongoDB Inc. MongoDB Ops Manager vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your MongoDB Inc. MongoDB Ops Manager version is affected

Latest MongoDB Inc. MongoDB Ops Manager vulnerabilities

• CVE-2026-87110 — Ops Manager Uncontrolled Resource Consumption in Monitoring Endpoints (CVSS 5.3)
• CVE-2026-87109 — Ops Manager Sensitive MFA Enrollment Information Exposure in User Listings (CVSS 6.5)
• CVE-2026-87108 — Ops Manager Improper Authorization in Daily Host Monitoring Retrieval (CVSS 4.3)
• CVE-2026-8431 — Ops Manager RCE via webhook body (CVSS 7.2)
• CVE-2021-20335 — SSL may be unexpectedly disabled during upgrade of multiple-server MongoDB Ops Manager (CVSS 4.6)
• CVE-2020-7927 — Potential privilege escalation in Ops Manager API (CVSS 6.5)
• CVE-2019-2388 — Potential exposure of log information in Ops Manager (CVSS 5.3)