The current version of MongoDB is 9.0.2 (as of 28/09/2026). patchletter checks the official source daily and emails you new releases.
Actively exploited vulnerabilities
The US cybersecurity agency CISA lists this vulnerability in its catalog of Known Exploited Vulnerabilities. What CISA does not carry does not appear in this list — even where it is being exploited.
- CVE-2025-14847MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability
7.5 high · over the network, without login · CISA deadline was 19 Jan
Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.
BSI security advisories
Advisories the German BSI (CERT-Bund) published for this product. Whether your version is affected is stated in the advisory itself.
- MongoDB Treiber: Mehrere Schwachstellen
WID-SEC-W-2026-3830 · 9 Oct
- MongoDB: Mehrere Schwachstellen
WID-SEC-W-2026-3209 · 5 Oct
- MongoDB PHP Driver: Schwachstelle ermöglicht Denial of Service
WID-SEC-W-2026-1562 · 5 Oct
- MongoDB Treiber (Python Driver, PHP Driver, C Driver, Compass und Laravel): Mehrere Schwachstellen
WID-SEC-W-2026-3583 · 5 Oct
- MongoDB: Mehrere Schwachstellen
WID-SEC-W-2026-3320 · 1 Oct
- MongoDB C Driver und Entity Framework Core Provider: Mehrere Schwachstellen
WID-SEC-W-2026-3453 · 18 Sept
- MongoDB Clients: Mehrere Schwachstellen
WID-SEC-W-2026-3066 · 17 Sept
- MongoDB Server: Mehrere Schwachstellen
WID-SEC-W-2026-3236 · 9 Sept
MongoDB at a glance
MongoDB is a widely used document database, common behind modern applications. MongoDB ships regular releases across LTS-style major versions plus security fixes; as a database — and one historically leaked through open instances — hardening and timely updates matter.
For admins the cardinal rule: never expose MongoDB to the internet unprotected — enable authentication and TLS and bind it to the internal network. Updates within a version are routine; major-version upgrades follow a documented path with attention to feature-compatibility versions and behaviour changes — don't skip stops. In replica sets and sharded clusters, updates roll node-by-node in the documented order; back up first. Check driver and application compatibility across versions. Track the version and its support window.
Support cycles (endoflife.date)
| Cycle | Latest version | Status |
|---|---|---|
| 9.0 | 9.0.2 | EOL 31 Oct 31 |
| 8.3 | 8.3.11 | EOL 31 Oct 29 |
| 8.2 | 8.2.12 | End of Life |
| 8.1 | 8.1.3 | End of Life |
| 8.0 | 8.0.32 | EOL 31 Oct 29 |
| 7.3 | 7.3.4 | End of Life |
| 7.2 | 7.2.2 | End of Life |
| 7.1 | 7.1.1 | End of Life |
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| 9.0.2 | STABLE | 28/09/2026 | – |
| 8.3.11 | STABLE | 11/09/2026 | Release notes → |
| 8.3.9 | STABLE | 08/09/2026 | Release notes → |
| 8.3.8 | STABLE | 11/08/2026 | Release notes → |
| 8.3.7 | STABLE | 24/07/2026 | Release notes → |
| 8.3.4 | STABLE | 15/06/2026 | Release notes → |
| 8.2.12 | STABLE | 28/07/2026 | – |
| 8.2.11 | STABLE | 16/06/2026 | – |
| 8.1.3 | STABLE | 08/08/2025 | – |
| 8.0.32 | STABLE | 11/09/2026 | – |
| 8.0.30 | STABLE | 08/09/2026 | – |
| 8.0.29 | STABLE | 11/08/2026 | – |
| 8.0.28 | STABLE | 28/07/2026 | – |
| 8.0.26 | STABLE | 16/06/2026 | – |
| 7.3.4 | STABLE | 14/08/2024 | – |
| 7.2.2 | STABLE | 28/02/2024 | – |
| 7.1.1 | STABLE | 16/11/2023 | – |
| 7.0.43 | STABLE | 11/09/2026 | – |
| 7.0.41 | STABLE | 08/09/2026 | – |
| 7.0.40 | STABLE | 11/08/2026 | – |
| 7.0.39 | STABLE | 28/07/2026 | – |
| 7.0.37 | STABLE | 16/06/2026 | – |
| 6.3.2 | STABLE | 28/06/2023 | Release notes → |
| 6.2.1 | STABLE | 28/02/2023 | Release notes → |
| 6.1.1 | STABLE | 03/01/2023 | Release notes → |
| 6.0.29 | STABLE | 16/06/2026 | – |
| 5.3.2 | STABLE | 15/06/2022 | Release notes → |
| 5.2.1 | STABLE | 17/02/2022 | Release notes → |
| 5.1.1 | STABLE | 01/12/2021 | Release notes → |
| 5.0.34 | STABLE | 16/06/2026 | – |
| 4.4.31 | STABLE | 24/06/2026 | – |
| 4.2.25 | STABLE | 04/12/2023 | Release notes → |
| 4.0.28 | STABLE | 24/01/2022 | Release notes → |
| 3.6.23 | STABLE | 16/03/2021 | Release notes → |
| 3.4.24 | STABLE | 24/01/2020 | Release notes → |
| 3.2.22 | STABLE | 26/12/2018 | Release notes → |
| 3.0.15 | STABLE | 10/05/2017 | Release notes → |
| 2.6.12 | STABLE | 22/03/2016 | Release notes → |
| 2.4.14 | STABLE | 27/04/2015 | Release notes → |
| 2.2.7 | STABLE | 15/01/2014 | Release notes → |
| 2.0.9 | STABLE | 02/04/2013 | Release notes → |
| 1.8.5 | STABLE | 01/02/2012 | Release notes → |
| 1.6.5 | STABLE | 08/12/2010 | Release notes → |
| 1.4.5 | STABLE | 31/08/2010 | Release notes → |
| 1.2.5 | STABLE | 07/04/2010 | Release notes → |
| 1.0.1 | STABLE | 22/10/2009 | – |
Frequently asked questions
- What is the latest version of MongoDB?
- MongoDB 9.0.2, released 28/09/2026. patchletter checks the vendor's official source daily for new releases.
- Where can I find the MongoDB release notes?
- The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
- How do I get notified about new MongoDB updates?
- Tick MongoDB off in the catalogue and leave your address. From then on new versions go out by email — one at a time, or bundled in the daily or weekly digest.
An email as soon as a new MongoDB version ships
We reconcile the vendor source daily. When a new version appears, it lands in your inbox right away or bundled as a digest. The update email is free and ends with one click. Alerts about vulnerabilities and end of support are part of patchletter Pro.
Embed this badge
The badge shows the current MongoDB version and keeps it up to date. Anyone may embed it, no account needed.
[](https://patchletter.com/en/software/mongodb)https://patchletter.com/badge/mongodb.svgAlso available: ?v=eol (end of support) and ?v=cve (actively exploited).
