VULNERABILITY INTELLIGENCE

CVE-2026-81524

CVSS score5.4 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2026-08-27
Last modified2026-09-29
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended.

Weakness classification

  • cna@mongodb.com: CWE-99

Primary references