Product by Open Source

    Mongodb Bi Connector

    18 known vulnerabilities in Mongodb Bi Connector (Open Source), 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Mongodb Bi Connector (Open Source)
    HighCVE-2026-81525

    Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver

    also in 8 other products

    		8.1
    HighCVE-2026-81517

    MongoDB Connector for BI Improper Error Handling of Log Write Failures May Cause Loss of SQL Service

    also in 1 other product

    		7.5
    HighCVE-2026-81522

    Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ Driver

    also in 7 other products

    		8.1
    HighCVE-2026-81490

    MongoDB BI Connector: NULL Pointer Dereference

    also in 1 other product

    		7.7
    HighCVE-2026-75159

    MongoDB BI Connector: Double Free

    also in 7 other products

    		5.9
    HighCVE-2026-81520

    MongoDB Connector for BI Unbounded Authentication Negotiation Leading to Connection Exhaustion

    also in 1 other product

    		7.5
    HighCVE-2026-77586

    MongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE Output

    also in 1 other product

    		8.0
    HighCVE-2026-81518

    BI Connector Optional Client Certificate Verification Allows Unauthenticated Connections

    also in 1 other product

    		7.5
    HighCVE-2026-81526

    Cross-database write redirection via unvalidated dotted database name in bulk write namespaces

    also in 7 other products

    		6.5
    HighCVE-2026-81529

    Connection-option injection via unescaped settings in the canonical MongoDB URL builder

    also in 7 other products

    		7.1
    MediumCVE-2026-81527

    NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation

    also in 7 other products

    		6.5
    HighCVE-2026-81521

    MongoDB GO Driver: Resource Injection

    also in 7 other products

    		6.5
    MediumCVE-2026-81530

    KMS master key exposure via unredacted credential serialization in driver settings string

    also in 7 other products

    		5.6
    MediumCVE-2026-77184

    MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE Output

    also in 1 other product

    		5.2
    MediumCVE-2026-81528

    NoSQL injection via array replacement bypassing update shape validation in driver write path

    also in 7 other products

    		5.4
    MediumCVE-2026-81524

    Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver

    also in 7 other products

    		5.4
    MediumCVE-2026-75573

    MongoDB Connector for BI mongodrdl Logs TLS Private-Key Password When Duplicate Options Are Supplied

    also in 7 other products

    		4.4
    MediumCVE-2026-81523

    Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt

    also in 7 other products

    		4.4

    All products by Open Source