Product by MongoDB
MongoDB PHP Driver
9 known vulnerabilities in MongoDB PHP Driver (MongoDB), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-81525 | Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver | 8.1 | |
| High | CVE-2026-6811 | PHP Stack Exhaustion | 7.5 | |
| Medium | CVE-2026-96745 | PHP object injection via unsuppressible __pclass class inference in command monitoring events | 5.6 | |
| Medium | CVE-2026-106436 | MongoDB PHP Driver: Unchecked Return Value | 4.8 | |
| Medium | CVE-2026-84968 | Heap out-of-bounds read via corrupt nested BSON in field path error message | 5.3 | |
| High | CVE-2026-106432 | Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver | 3.6 | |
| Medium | CVE-2025-12119 | Bulk write with options may read invalid memory | 6.8 | |
| High | CVE-2021-32050 | MongoDB: Exposure of Sensitive Information to an Unauthorized Actor | 4.2 | |
| High | CVE-2024-7553 | Accessing Untrusted Directory May Allow Local Privilege Escalation | 7.3 |