Mongodb PHP Extension vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Mongodb PHP Extension: 1 record(s), with affected versions and fixes.
CVE-2026-81525
High · 8.1
CWE-943 Aug 27, 2026
Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver
The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations silently directed at a different storage location than the one the application intended.