MEDIUM 5.3 NVD

CVE-2026-81524

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driv

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended.

References

https://github.com/mongodb/mongo-c-driver/releases/tag/2.5.1

Published: 2026-08-27 · Source: NVD · Feed updated: 2026-08-27

This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-08-27 via NVD.

vulnfeed aggregates 11337 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.