MONGODB C# Driver

• CVE-2026-114654 Medium 6.5 BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards 0.3%
• CVE-2026-114653 Medium 6.5 Silent client-side encryption bypass via unescaped field-name regex in CSFLE schema builder 0.2%
• CVE-2026-114652 Medium 6.5 Update operator injection via single-element list rewriting in the update builder 0.3%
• CVE-2026-114651 Medium 4.0 Cross-document data leak via malformed BSON array parsing in reused thread buffer 0.4%
• CVE-2026-114650 Medium 5.9 Plaintext exposure of encrypted fields via ANSI code-page corruption of database name 0.1%
• CVE-2026-114649 Medium 6.8 Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cache 0.2%
• CVE-2026-114648 High 7.6 NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keys 0.3%
• CVE-2026-114647 Medium 4.3 NoSQL operator injection via unvalidated replacement document in findOneAndReplace 0.3%
• CVE-2026-114646 Medium 6.5 NoSQL command injection via mismatched raw BSON length prefix written verbatim to the wire 0.3%
• CVE-2026-114644 Medium 5.9 Memory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserialization 0.5%
• CVE-2026-114643 Medium 5.4 Duplicate geometry fields via unvalidated GeoJSON extra members 0.4%
• CVE-2026-88026 Medium 6.5 Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver 0.4%
• CVE-2026-88025 High 8.3 GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# Driver 0.5%
• CVE-2026-81530 Medium 5.6 KMS master key exposure via unredacted credential serialization in driver settings string <0.1%
• CVE-2026-81529 High 7.1 Connection-option injection via unescaped settings in the canonical MongoDB URL builder 0.3%
• CVE-2026-81528 Medium 5.4 NoSQL injection via array replacement bypassing update shape validation in driver write path 0.3%
• CVE-2026-81527 Medium 6.5 NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation 0.3%