https://patchfirst.co/vendor/mongodb/New and newly exploited MongoDB CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2025-14847/CVE-2025-14847#kevMon, 29 Dec 2025 00:00:00 GMTMongoDB · MongoDB and MongoDB Server. In CISA KEV since 2025-12-29. ENISA EUVD lists it as exploited. EPSS 83.2% (higher than 99.68% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 73.2 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2019-10758/CVE-2019-10758#kevFri, 10 Dec 2021 00:00:00 GMTMongoDB · mongo-express. In CISA KEV since 2021-12-10. ENISA EUVD lists it as exploited. EPSS 84.7% (higher than 99.71% of CVEs). CVSS 9.9 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.9 of 100.kevpublic-exploitT1190T1059