Search
Find a vulnerability
Search criteria
11 vulnerabilities found for GO Driver by MongoDB
CERTFR-2026-AVI-1293
Vulnerability from certfr_avis - Published: 2026-10-12 - Updated: 2026-10-12
De multiples vulnérabilités ont été découvertes dans les produits MongoDB. Elles permettent à un attaquant de provoquer un déni de service à distance et un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| MongoDB | C Driver | C Driver versions antérieures à 1.30.13 | ||
| MongoDB | C++ Driver | C++ Driver versions antérieures à 4.6.1 | ||
| MongoDB | Python Driver | Python Driver versions antérieures à 4.18.3 | ||
| MongoDB | PHP Driver | PHP Driver versions 2.1.x antérieures à 2.1.11 | ||
| MongoDB | PHP Driver | PHP Driver versions 2.5.x antérieures à 2.5.4 | ||
| MongoDB | PHP Driver | PHP Driver versions antérieures à 1.21.11 | ||
| MongoDB | C Driver | C Driver versions 2.5.x antérieures à 2.5.6 | ||
| MongoDB | libmongocrypt | libmongocrypt versions antérieures à 1.20.5 | ||
| MongoDB | Go Driver | Go Driver versions antérieures à 2.9.2 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "C Driver versions ant\u00e9rieures \u00e0 1.30.13",
"product": {
"name": "C Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "C++ Driver versions ant\u00e9rieures \u00e0 4.6.1",
"product": {
"name": "C++ Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Python Driver versions ant\u00e9rieures \u00e0 4.18.3",
"product": {
"name": "Python Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "PHP Driver versions 2.1.x ant\u00e9rieures \u00e0 2.1.11",
"product": {
"name": "PHP Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "PHP Driver versions 2.5.x ant\u00e9rieures \u00e0 2.5.4",
"product": {
"name": "PHP Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "PHP Driver versions ant\u00e9rieures \u00e0 1.21.11",
"product": {
"name": "PHP Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "C Driver versions 2.5.x ant\u00e9rieures \u00e0 2.5.6",
"product": {
"name": "C Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "libmongocrypt versions ant\u00e9rieures \u00e0 1.20.5",
"product": {
"name": "libmongocrypt",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Go Driver versions ant\u00e9rieures \u00e0 2.9.2",
"product": {
"name": "Go Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-75595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75595"
},
{
"name": "CVE-2026-59649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59649"
},
{
"name": "CVE-2026-59648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59648"
},
{
"name": "CVE-2026-84445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
},
{
"name": "CVE-2026-76172",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76172"
},
{
"name": "CVE-2026-73088",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73088"
},
{
"name": "CVE-2026-84375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84375"
},
{
"name": "CVE-2026-73089",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73089"
},
{
"name": "CVE-2026-12817",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12817"
},
{
"name": "CVE-2026-59640",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59640"
},
{
"name": "CVE-2026-56876",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56876"
},
{
"name": "CVE-2026-59647",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59647"
},
{
"name": "CVE-2026-58059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58059"
},
{
"name": "CVE-2026-75596",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75596"
},
{
"name": "CVE-2026-8763",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8763"
},
{
"name": "CVE-2026-15055",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15055"
},
{
"name": "CVE-2026-14682",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14682"
},
{
"name": "CVE-2025-71330",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-71330"
},
{
"name": "CVE-2026-58061",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58061"
},
{
"name": "CVE-2026-2303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2303"
},
{
"name": "CVE-2026-84369",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84369"
},
{
"name": "CVE-2026-12802",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12802"
},
{
"name": "CVE-2026-58063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58063"
},
{
"name": "CVE-2025-71329",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-71329"
},
{
"name": "CVE-2026-84304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84304"
},
{
"name": "CVE-2026-13506",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13506"
},
{
"name": "CVE-2026-75899",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75899"
},
{
"name": "CVE-2026-59642",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59642"
},
{
"name": "CVE-2026-75931",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75931"
},
{
"name": "CVE-2026-13586",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13586"
},
{
"name": "CVE-2026-75975",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75975"
},
{
"name": "CVE-2026-59639",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59639"
},
{
"name": "CVE-2026-84370",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84370"
}
],
"initial_release_date": "2026-10-12T00:00:00",
"last_revision_date": "2026-10-12T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1293",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-12T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits MongoDB. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans MongoDB",
"vendor_advisories": [
{
"published_at": "2026-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB MONGOCRYPT-966",
"url": "https://jira.mongodb.org/browse/MONGOCRYPT-966"
},
{
"published_at": "2026-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB CDRIVER-6418",
"url": "https://jira.mongodb.org/browse/CDRIVER-6418"
},
{
"published_at": "2026-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB CXX-3551",
"url": "https://jira.mongodb.org/browse/CXX-3551"
},
{
"published_at": "2026-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB MONGOCRYPT-986",
"url": "https://jira.mongodb.org/browse/MONGOCRYPT-986"
},
{
"published_at": "2026-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB PHPC-2741",
"url": "https://jira.mongodb.org/browse/PHPC-2741"
},
{
"published_at": "2026-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB CDRIVER-6370",
"url": "https://jira.mongodb.org/browse/CDRIVER-6370"
},
{
"published_at": "2026-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB PYTHON-6110",
"url": "https://jira.mongodb.org/browse/PYTHON-6110"
},
{
"published_at": "2026-10-09",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB ops-manager-server-8027",
"url": "https://www.mongodb.com/docs/ops-manager/current/release-notes/application/#ops-manager-server-8027"
},
{
"published_at": "2026-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB CDRIVER-6423",
"url": "https://jira.mongodb.org/browse/CDRIVER-6423"
},
{
"published_at": "2026-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB GODRIVER-4136",
"url": "https://jira.mongodb.org/browse/GODRIVER-4136"
},
{
"published_at": "2026-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB CDRIVER-6419",
"url": "https://jira.mongodb.org/browse/CDRIVER-6419"
},
{
"published_at": "2026-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB MONGOCRYPT-964",
"url": "https://jira.mongodb.org/browse/MONGOCRYPT-964"
},
{
"published_at": "2026-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB PHPC-2739",
"url": "https://jira.mongodb.org/browse/PHPC-2739"
},
{
"published_at": "2026-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB GODRIVER-4102",
"url": "https://jira.mongodb.org/browse/GODRIVER-4102"
}
]
}
CERTFR-2026-AVI-1169
Vulnerability from certfr_avis - Published: 2026-09-14 - Updated: 2026-09-14
De multiples vulnérabilités ont été découvertes dans MongoDB. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| MongoDB | C# Driver | C# Driver versions antérieures à 3.11.2 | ||
| MongoDB | Python Driver | Python Driver versions antérieures à 4.18.1 | ||
| MongoDB | PHP Driver | PHP Driver versions antérieures à 2.4.2 | ||
| MongoDB | C++ Driver | C++ Driver versions antérieures à 4.5.3 | ||
| MongoDB | Go Driver | Go Driver versions antérieures à 2.9.1 | ||
| MongoDB | Ruby Driver | Ruby Driver versions antérieures à 2.26.0 | ||
| MongoDB | PHP Driver | PHP Laravel MongoDB Integration versions antérieures à 5.11.0 | ||
| MongoDB | C Driver | C Driver versions antérieures à 2.5.3 | ||
| MongoDB | Core Server | Core Server versions antérieures à 9.1.0-rc0 | ||
| MongoDB | Java Driver | Java Driver versions antérieures à 5.11.1 | ||
| MongoDB | C Driver | C Driver versions antérieures à 1.30.10 | ||
| MongoDB | Rust Driver | Rust Driver versions antérieures à 3.9.1 | ||
| MongoDB | Core Server | Core Server versions antérieures à 7.0.43 | ||
| MongoDB | Core Server | Core Server versions antérieures à 8.3.11 | ||
| MongoDB | Go Driver | Go Driver versions antérieures à 1.17.10 | ||
| MongoDB | PHP Driver | PHP Driver versions antérieures à 1.21.5 | ||
| MongoDB | Core Server | Core Server versions antérieures à 8.0.32 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "C# Driver versions ant\u00e9rieures \u00e0 3.11.2",
"product": {
"name": "C# Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Python Driver versions ant\u00e9rieures \u00e0 4.18.1",
"product": {
"name": "Python Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "PHP Driver versions ant\u00e9rieures \u00e0 2.4.2",
"product": {
"name": "PHP Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "C++ Driver versions ant\u00e9rieures \u00e0 4.5.3",
"product": {
"name": "C++ Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Go Driver versions ant\u00e9rieures \u00e0 2.9.1",
"product": {
"name": "Go Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Ruby Driver versions ant\u00e9rieures \u00e0 2.26.0",
"product": {
"name": "Ruby Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "PHP Laravel MongoDB Integration versions ant\u00e9rieures \u00e0 5.11.0",
"product": {
"name": "PHP Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "C Driver versions ant\u00e9rieures \u00e0 2.5.3",
"product": {
"name": "C Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Core Server versions ant\u00e9rieures \u00e0 9.1.0-rc0",
"product": {
"name": "Core Server",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Java Driver versions ant\u00e9rieures \u00e0 5.11.1",
"product": {
"name": "Java Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "C Driver versions ant\u00e9rieures \u00e0 1.30.10",
"product": {
"name": "C Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Rust Driver versions ant\u00e9rieures \u00e0 3.9.1",
"product": {
"name": "Rust Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Core Server versions ant\u00e9rieures \u00e0 7.0.43",
"product": {
"name": "Core Server",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Core Server versions ant\u00e9rieures \u00e0 8.3.11",
"product": {
"name": "Core Server",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Go Driver versions ant\u00e9rieures \u00e0 1.17.10",
"product": {
"name": "Go Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "PHP Driver versions ant\u00e9rieures \u00e0 1.21.5",
"product": {
"name": "PHP Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Core Server versions ant\u00e9rieures \u00e0 8.0.32",
"product": {
"name": "Core Server",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-88026",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88026"
},
{
"name": "CVE-2026-88028",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88028"
},
{
"name": "CVE-2026-88025",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88025"
},
{
"name": "CVE-2026-88022",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88022"
},
{
"name": "CVE-2026-88031",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88031"
},
{
"name": "CVE-2026-88032",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88032"
},
{
"name": "CVE-2026-88027",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88027"
},
{
"name": "CVE-2026-89099",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89099"
},
{
"name": "CVE-2026-88036",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88036"
},
{
"name": "CVE-2026-88024",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88024"
},
{
"name": "CVE-2026-88033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88033"
},
{
"name": "CVE-2026-88034",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88034"
},
{
"name": "CVE-2026-88023",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88023"
},
{
"name": "CVE-2026-88029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88029"
},
{
"name": "CVE-2026-88030",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88030"
},
{
"name": "CVE-2026-88035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88035"
}
],
"initial_release_date": "2026-09-14T00:00:00",
"last_revision_date": "2026-09-14T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1169",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-14T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans MongoDB. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans MongoDB",
"vendor_advisories": [
{
"published_at": "2026-09-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB GODRIVER-4081",
"url": "https://jira.mongodb.org/browse/GODRIVER-4081"
},
{
"published_at": "2026-09-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB RUBY-3941",
"url": "https://jira.mongodb.org/browse/RUBY-3941"
},
{
"published_at": "2026-09-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB PHPLIB-1929",
"url": "https://jira.mongodb.org/browse/PHPLIB-1929"
},
{
"published_at": "2026-09-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB JAVA-6276",
"url": "https://jira.mongodb.org/browse/JAVA-6276"
},
{
"published_at": "2026-09-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB JAVA-6283",
"url": "https://jira.mongodb.org/browse/JAVA-6283"
},
{
"published_at": "2026-09-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB CDRIVER-6427",
"url": "https://jira.mongodb.org/browse/CDRIVER-6427"
},
{
"published_at": "2026-09-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB CSHARP-6190",
"url": "https://jira.mongodb.org/browse/CSHARP-6190"
},
{
"published_at": "2026-09-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB CXX-3556",
"url": "https://jira.mongodb.org/browse/CXX-3556"
},
{
"published_at": "2026-09-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB RUST-2469",
"url": "https://jira.mongodb.org/browse/RUST-2469"
},
{
"published_at": "2026-09-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB PHPLARA-265",
"url": "https://jira.mongodb.org/browse/PHPLARA-265"
},
{
"published_at": "2026-09-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB CDRIVER-6416",
"url": "https://jira.mongodb.org/browse/CDRIVER-6416"
},
{
"published_at": "2026-09-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB CSHARP-6177",
"url": "https://jira.mongodb.org/browse/CSHARP-6177"
},
{
"published_at": "2026-09-11",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB SERVER-134063",
"url": "https://jira.mongodb.org/browse/SERVER-134063"
},
{
"published_at": "2026-09-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB PYTHON-5994",
"url": "https://jira.mongodb.org/browse/PYTHON-5994"
},
{
"published_at": "2026-09-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB PHPLARA-260",
"url": "https://jira.mongodb.org/browse/PHPLARA-260"
}
]
}
CERTFR-2026-AVI-0142
Vulnerability from certfr_avis - Published: 2026-02-11 - Updated: 2026-02-11
De multiples vulnérabilités ont été découvertes dans MongoDB. Elles permettent à un attaquant de provoquer un déni de service à distance, un contournement de la politique de sécurité et un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| MongoDB | Core Server | Core Server versions 8.2.x antérieures à 8.2.6 | ||
| MongoDB | Core Server | Core Server versions 7.x antérieures à 7.0.31 | ||
| MongoDB | Go Driver | Go Driver versions antérieures à 2.4.2 | ||
| MongoDB | Mongoid | Mongoid versions 8.0.x antérieures à 8.0.12 | ||
| MongoDB | Mongoid | Mongoid versions 8.1.x antérieures à 8.1.12, | ||
| MongoDB | Core Server | Core Server versions 8.x antérieures à 8.0.20 | ||
| MongoDB | Go Driver | Go Driver versions antérieures à 1.17.7 | ||
| MongoDB | Mongoid | Mongoid versions 7.x antérieures à 7.6.1 | ||
| MongoDB | Mongoid | Mongoid versions 9.0.x antérieures à 9.0.10 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Core Server versions 8.2.x ant\u00e9rieures \u00e0 8.2.6",
"product": {
"name": "Core Server",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Core Server versions 7.x ant\u00e9rieures \u00e0 7.0.31",
"product": {
"name": "Core Server",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Go Driver versions ant\u00e9rieures \u00e0 2.4.2",
"product": {
"name": "Go Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Mongoid versions 8.0.x ant\u00e9rieures \u00e0 8.0.12",
"product": {
"name": "Mongoid",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Mongoid versions 8.1.x ant\u00e9rieures \u00e0 8.1.12,",
"product": {
"name": "Mongoid",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Core Server versions 8.x ant\u00e9rieures \u00e0 8.0.20",
"product": {
"name": "Core Server",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Go Driver versions ant\u00e9rieures \u00e0 1.17.7",
"product": {
"name": "Go Driver",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Mongoid versions 7.x ant\u00e9rieures \u00e0 7.6.1",
"product": {
"name": "Mongoid",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
},
{
"description": "Mongoid versions 9.0.x ant\u00e9rieures \u00e0 9.0.10",
"product": {
"name": "Mongoid",
"vendor": {
"name": "MongoDB",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [],
"initial_release_date": "2026-02-11T00:00:00",
"last_revision_date": "2026-02-11T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0142",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-02-11T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans MongoDB. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, un contournement de la politique de s\u00e9curit\u00e9 et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans MongoDB",
"vendor_advisories": [
{
"published_at": "2026-02-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB SERVER-113532",
"url": "https://jira.mongodb.org/browse/SERVER-113532"
},
{
"published_at": "2026-02-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB SERVER-114695",
"url": "https://jira.mongodb.org/browse/SERVER-114695"
},
{
"published_at": "2026-02-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB SERVER-116210",
"url": "https://jira.mongodb.org/browse/SERVER-116210"
},
{
"published_at": "2026-01-27",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB CDRIVER-6125",
"url": "https://jira.mongodb.org/browse/CDRIVER-6125"
},
{
"published_at": "2026-02-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB SERVER-112952",
"url": "https://jira.mongodb.org/browse/SERVER-112952"
},
{
"published_at": "2026-02-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB SERVER-99119",
"url": "https://jira.mongodb.org/browse/SERVER-99119"
},
{
"published_at": "2026-02-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB SERVER-102364",
"url": "https://jira.mongodb.org/browse/SERVER-102364"
},
{
"published_at": "2026-02-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB MONGOID-5919",
"url": "https://jira.mongodb.org/browse/MONGOID-5919"
},
{
"published_at": "2026-02-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB SERVER-114126",
"url": "https://jira.mongodb.org/browse/SERVER-114126"
},
{
"published_at": "2026-02-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB GODRIVER-3770",
"url": "https://jira.mongodb.org/browse/GODRIVER-3770"
},
{
"published_at": "2026-02-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB SERVER-114838",
"url": "https://jira.mongodb.org/browse/SERVER-114838"
},
{
"published_at": "2026-02-10",
"title": "Bulletin de s\u00e9curit\u00e9 MongoDB SERVER-113685",
"url": "https://jira.mongodb.org/browse/SERVER-113685"
}
]
}
CVE-2026-107325 (GCVE-0-2026-107325)
Vulnerability from nvd – Published: 2026-10-08 19:01 – Updated: 2026-10-15 16:37
VLAI
EPSS
VEX
Title
Application denial of service via missing BSON array length validation in MongoDB Go Driver
Summary
Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an affected application may terminate an unprotected application process, causing a denial of service. No confidentiality or integrity impact has been identified.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-08 19:32 UTC
CWE
- CWE-129 - Improper Validation of Array Index
Assigner
References
1 reference
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-107325",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-08T19:32:24.880891Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-08T19:32:32.402Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Go Driver",
"vendor": "MongoDB",
"versions": [
{
"lessThan": "1.*",
"status": "affected",
"version": "1.1.0",
"versionType": "semver"
},
{
"lessThan": "2.9.2",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an affected application may terminate an unprotected application process, causing a denial of service. No confidentiality or integrity impact has been identified."
}
],
"value": "Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an affected application may terminate an unprotected application process, causing a denial of service. No confidentiality or integrity impact has been identified."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-129",
"description": "CWE-129: Improper Validation of Array Index",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T16:37:56.693Z",
"orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"shortName": "mongodb"
},
"references": [
{
"url": "https://jira.mongodb.org/browse/GODRIVER-4136"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Application denial of service via missing BSON array length validation in MongoDB Go Driver",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"assignerShortName": "mongodb",
"cveId": "CVE-2026-107325",
"datePublished": "2026-10-08T19:01:01.894Z",
"dateReserved": "2026-10-07T17:54:29.794Z",
"dateUpdated": "2026-10-15T16:37:56.693Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-107324 (GCVE-0-2026-107324)
Vulnerability from nvd – Published: 2026-10-08 18:58 – Updated: 2026-10-08 19:31
VLAI
EPSS
VEX
Title
Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver
Summary
An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process, causing a denial of service. The driver's server-monitoring path contains panic recovery and is limited to server-selection failure.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-08 19:31 UTC
CWE
- CWE-190 - Integer Overflow or Wraparound
Assigner
References
1 reference
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-107324",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-08T19:31:03.806411Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-08T19:31:13.465Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Go Driver",
"vendor": "MongoDB",
"versions": [
{
"lessThan": "1.2.0",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
},
{
"lessThan": "2.9.0",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process, causing a denial of service. The driver\u0027s server-monitoring path contains panic recovery and is limited to server-selection failure."
}
],
"value": "An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process, causing a denial of service. The driver\u0027s server-monitoring path contains panic recovery and is limited to server-selection failure."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "CWE-190: Integer Overflow or Wraparound",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-08T18:58:01.098Z",
"orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"shortName": "mongodb"
},
"references": [
{
"url": "https://jira.mongodb.org/browse/GODRIVER-4102"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver"
}
},
"cveMetadata": {
"assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"assignerShortName": "mongodb",
"cveId": "CVE-2026-107324",
"datePublished": "2026-10-08T18:58:01.098Z",
"dateReserved": "2026-10-07T17:54:28.161Z",
"dateUpdated": "2026-10-08T19:31:13.465Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-88031 (GCVE-0-2026-88031)
Vulnerability from nvd – Published: 2026-09-10 17:59 – Updated: 2026-09-10 18:25
VLAI
EPSS
VEX
Title
GridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver
Summary
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-10 18:25 UTC
CWE
- CWE-943 - Improper Neutralization of Special Elements in Data Query Logic
Assigner
References
1 reference
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88031",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-10T18:25:51.598529Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T18:25:57.644Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Go Driver",
"vendor": "MongoDB",
"versions": [
{
"lessThan": "1.17.10",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
},
{
"lessThan": "2.9.1",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable."
}
],
"value": "Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-943",
"description": "CWE-943: Improper Neutralization of Special Elements in Data Query Logic",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T17:59:35.845Z",
"orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"shortName": "mongodb"
},
"references": [
{
"url": "https://jira.mongodb.org/browse/GODRIVER-4081"
}
],
"source": {
"discovery": "INTERNAL"
},
"title": "GridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"assignerShortName": "mongodb",
"cveId": "CVE-2026-88031",
"datePublished": "2026-09-10T17:59:35.845Z",
"dateReserved": "2026-09-09T19:49:39.183Z",
"dateUpdated": "2026-09-10T18:25:57.644Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-81521 (GCVE-0-2026-81521)
Vulnerability from nvd – Published: 2026-08-27 18:31 – Updated: 2026-10-06 18:17
VLAI
EPSS
VEX
Title
Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driver
Summary
The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name could therefore have the write directed at a database and collection other than the ones it intended. Only the Client.BulkWrite API is affected.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-28 15:52 UTC
CWE
- CWE-99 - Improper Control of Resource Identifiers ('Resource Injection')
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-81521",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-28T15:52:01.062590Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-28T15:52:13.039Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "GO Driver",
"vendor": "MongoDB",
"versions": [
{
"lessThan": "2.8.2",
"status": "affected",
"version": "2.1.0",
"versionType": "semver"
},
{
"lessThan": "2.9.2",
"status": "affected",
"version": "2.9.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The MongoDB Go Driver\u0027s client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name could therefore have the write directed at a database and collection other than the ones it intended. Only the Client.BulkWrite API is affected."
}
],
"value": "The MongoDB Go Driver\u0027s client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name could therefore have the write directed at a database and collection other than the ones it intended. Only the Client.BulkWrite API is affected."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-99",
"description": "CWE-99: Improper Control of Resource Identifiers (\u0027Resource Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-06T18:17:46.581Z",
"orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"shortName": "mongodb"
},
"references": [
{
"url": "https://jira.mongodb.org/browse/GODRIVER-4075"
},
{
"url": "https://pkg.go.dev/go.mongodb.org/mongo-driver/v2@v2.8.2"
}
],
"source": {
"discovery": "INTERNAL"
},
"title": "Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driver",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"assignerShortName": "mongodb",
"cveId": "CVE-2026-81521",
"datePublished": "2026-08-27T18:31:45.450Z",
"dateReserved": "2026-08-26T22:13:12.343Z",
"dateUpdated": "2026-10-06T18:17:46.581Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-107325 (GCVE-0-2026-107325)
Vulnerability from cvelistv5 – Published: 2026-10-08 19:01 – Updated: 2026-10-15 16:37
VLAI
EPSS
VEX
Title
Application denial of service via missing BSON array length validation in MongoDB Go Driver
Summary
Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an affected application may terminate an unprotected application process, causing a denial of service. No confidentiality or integrity impact has been identified.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-08 19:32 UTC
CWE
- CWE-129 - Improper Validation of Array Index
Assigner
References
1 reference
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-107325",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-08T19:32:24.880891Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-08T19:32:32.402Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Go Driver",
"vendor": "MongoDB",
"versions": [
{
"lessThan": "1.*",
"status": "affected",
"version": "1.1.0",
"versionType": "semver"
},
{
"lessThan": "2.9.2",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an affected application may terminate an unprotected application process, causing a denial of service. No confidentiality or integrity impact has been identified."
}
],
"value": "Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an affected application may terminate an unprotected application process, causing a denial of service. No confidentiality or integrity impact has been identified."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-129",
"description": "CWE-129: Improper Validation of Array Index",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T16:37:56.693Z",
"orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"shortName": "mongodb"
},
"references": [
{
"url": "https://jira.mongodb.org/browse/GODRIVER-4136"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Application denial of service via missing BSON array length validation in MongoDB Go Driver",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"assignerShortName": "mongodb",
"cveId": "CVE-2026-107325",
"datePublished": "2026-10-08T19:01:01.894Z",
"dateReserved": "2026-10-07T17:54:29.794Z",
"dateUpdated": "2026-10-15T16:37:56.693Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-107324 (GCVE-0-2026-107324)
Vulnerability from cvelistv5 – Published: 2026-10-08 18:58 – Updated: 2026-10-08 19:31
VLAI
EPSS
VEX
Title
Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver
Summary
An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process, causing a denial of service. The driver's server-monitoring path contains panic recovery and is limited to server-selection failure.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-08 19:31 UTC
CWE
- CWE-190 - Integer Overflow or Wraparound
Assigner
References
1 reference
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-107324",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-08T19:31:03.806411Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-08T19:31:13.465Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Go Driver",
"vendor": "MongoDB",
"versions": [
{
"lessThan": "1.2.0",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
},
{
"lessThan": "2.9.0",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process, causing a denial of service. The driver\u0027s server-monitoring path contains panic recovery and is limited to server-selection failure."
}
],
"value": "An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process, causing a denial of service. The driver\u0027s server-monitoring path contains panic recovery and is limited to server-selection failure."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "CWE-190: Integer Overflow or Wraparound",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-08T18:58:01.098Z",
"orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"shortName": "mongodb"
},
"references": [
{
"url": "https://jira.mongodb.org/browse/GODRIVER-4102"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver"
}
},
"cveMetadata": {
"assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"assignerShortName": "mongodb",
"cveId": "CVE-2026-107324",
"datePublished": "2026-10-08T18:58:01.098Z",
"dateReserved": "2026-10-07T17:54:28.161Z",
"dateUpdated": "2026-10-08T19:31:13.465Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-88031 (GCVE-0-2026-88031)
Vulnerability from cvelistv5 – Published: 2026-09-10 17:59 – Updated: 2026-09-10 18:25
VLAI
EPSS
VEX
Title
GridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver
Summary
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-10 18:25 UTC
CWE
- CWE-943 - Improper Neutralization of Special Elements in Data Query Logic
Assigner
References
1 reference
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88031",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-10T18:25:51.598529Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T18:25:57.644Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Go Driver",
"vendor": "MongoDB",
"versions": [
{
"lessThan": "1.17.10",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
},
{
"lessThan": "2.9.1",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable."
}
],
"value": "Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-943",
"description": "CWE-943: Improper Neutralization of Special Elements in Data Query Logic",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T17:59:35.845Z",
"orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"shortName": "mongodb"
},
"references": [
{
"url": "https://jira.mongodb.org/browse/GODRIVER-4081"
}
],
"source": {
"discovery": "INTERNAL"
},
"title": "GridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"assignerShortName": "mongodb",
"cveId": "CVE-2026-88031",
"datePublished": "2026-09-10T17:59:35.845Z",
"dateReserved": "2026-09-09T19:49:39.183Z",
"dateUpdated": "2026-09-10T18:25:57.644Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-81521 (GCVE-0-2026-81521)
Vulnerability from cvelistv5 – Published: 2026-08-27 18:31 – Updated: 2026-10-06 18:17
VLAI
EPSS
VEX
Title
Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driver
Summary
The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name could therefore have the write directed at a database and collection other than the ones it intended. Only the Client.BulkWrite API is affected.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-28 15:52 UTC
CWE
- CWE-99 - Improper Control of Resource Identifiers ('Resource Injection')
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-81521",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-28T15:52:01.062590Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-28T15:52:13.039Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "GO Driver",
"vendor": "MongoDB",
"versions": [
{
"lessThan": "2.8.2",
"status": "affected",
"version": "2.1.0",
"versionType": "semver"
},
{
"lessThan": "2.9.2",
"status": "affected",
"version": "2.9.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The MongoDB Go Driver\u0027s client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name could therefore have the write directed at a database and collection other than the ones it intended. Only the Client.BulkWrite API is affected."
}
],
"value": "The MongoDB Go Driver\u0027s client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name could therefore have the write directed at a database and collection other than the ones it intended. Only the Client.BulkWrite API is affected."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-99",
"description": "CWE-99: Improper Control of Resource Identifiers (\u0027Resource Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-06T18:17:46.581Z",
"orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"shortName": "mongodb"
},
"references": [
{
"url": "https://jira.mongodb.org/browse/GODRIVER-4075"
},
{
"url": "https://pkg.go.dev/go.mongodb.org/mongo-driver/v2@v2.8.2"
}
],
"source": {
"discovery": "INTERNAL"
},
"title": "Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driver",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"assignerShortName": "mongodb",
"cveId": "CVE-2026-81521",
"datePublished": "2026-08-27T18:31:45.450Z",
"dateReserved": "2026-08-26T22:13:12.343Z",
"dateUpdated": "2026-10-06T18:17:46.581Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}