CVE-2026-96744High 7.1Unauthorized cache lock takeover via expression injection in lock owner values in MongoDB integration for Laravel0.3%
CVE-2026-88028Medium 6.5Unauthorized document disclosure via query-operator injection in polymorphic relation identifiers in MongoDB integration for Laravel0.4%
CVE-2026-88027High 7.1Mass deletion and overwrite of embedded documents via query-operator injection in embedded record keys in MongoDB integration for Laravel0.3%
CVE-2026-88022High 7.7Unauthorized document disclosure and deletion via query-operator injection in explicit equality filters in MongoDB integration for Laravel0.4%