MONGODB libmongocrypt

• CVE-2026-114655 Medium 5.9 KMS request injection via unsanitized key vault and provider values in libmongocrypt 0.3%
• CVE-2026-106434 Medium 4.3 Unrecognized payload acceptance in explicit decryption in MongoDB libmongocrypt 0.1%
• CVE-2026-106433 High 8.8 Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt 0.3%
• CVE-2026-106429 Medium 6.5 Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt 0.3%
• CVE-2026-84962 Medium 4.2 Authenticated KMS request forgery via CRLF injection in GCP key identifier strings 0.2%
• CVE-2026-84971 Medium 6.5 Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path 0.3%
• CVE-2026-81523 Medium 4.4 Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt <0.1%