CVE Intelligence

Mongodb PHP Extension vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Mongodb PHP Extension: 1 record(s), with affected versions and fixes.

CVE-2026-81525 High · 8.1 CWE-943 Aug 27, 2026
Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver
The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations silently directed at a different storage location than the one the application intended.