MEDIUM 4.8 NVD

CVE-2026-76794

MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML. A MongoDB user with write access can in

MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML. A MongoDB user with write access can introduce crafted metadata that may cause script code to run when another user generates and opens the report, potentially exposing report contents or altering its display.

References

https://www.mongodb.com/docs/sql-interface/changelog/

Published: 2026-08-28 · Source: NVD · Feed updated: 2026-08-28

This medium severity vulnerability with a CVSS score of 4.8 was published on 2026-08-28 via NVD.

vulnfeed aggregates 11493 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.