MEDIUM 6.8 NVD

CVE-2026-92756

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database.

References

https://jira.mongodb.org/browse/EF-388

Published: 2026-09-17 · Source: NVD · Feed updated: 2026-09-17

This medium severity vulnerability with a CVSS score of 6.8 was published on 2026-09-17 via NVD.

vulnfeed aggregates 13500 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.