https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 12:45:12 +0000 https://vulnerability.circl.lu/sighting/9239e7cf-386e-4b82-8fb5-872e76a90ec3/export {"uuid": "9239e7cf-386e-4b82-8fb5-872e76a90ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81525", "type": "seen", "source": "https://gist.github.com/alon710/5fa9ee3aa8e2d98c87b91ce0095db96e", "content": "# CVE-2026-81525: CVE-2026-81525: Cross-Tenant Database Retargeting via Dot and Null Injection in MongoDB PHP Driver\n\n> **CVSS Score:** 8.6\n> **Published:** 2026-09-08\n> **Full Report:** https://cvereports.com/reports/CVE-2026-81525\n\n## Summary\nA high-severity namespace injection vulnerability in both the MongoDB Client Library for PHP (mongodb/mongodb) and the native PHP C Extension (ext-mongodb) allows unauthenticated remote attackers to bypass logical database separation and execute database commands inside unauthorized storage compartments via dot (\".\") and null byte (\"\\0\") injection.\n\n## TL;DR\nImproper input validation in MongoDB's PHP libraries allows attackers to inject dot characters and null bytes into database and collection name parameters, silently retargeting database queries and writes to administrative or system collections.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-943: Improper Neutralization of Special Elements in Data Query Logic\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0 Score**: 8.6 (High)\n- **EPSS Score**: 0.00273 (19.38th Percentile)\n- **Impact**: Logical Security Boundary Bypass / Multi-Tenant Retargeting\n- **Exploit Status**: Proof-of-Concept (PoC) Released\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- MongoDB Client Library for PHP (mongodb/mongodb)\n- MongoDB PHP C Extension (ext-mongodb)\n- **mongodb/mongodb**: < 1.21.4 (Fixed in: `1.21.4`)\n- **mongodb/mongodb**: >= 2.0.0, < 2.4.1 (Fixed in: `2.4.1`)\n- **ext-mongodb**: < 1.21.6 (Fixed in: `1.21.6`)\n- **ext-mongodb**: >= 2.0.0, < 2.4.1 (Fixed in: `2.4.1`)\n\n## Mitigation\n\n- Upgrade MongoDB PHP Client Library to 1.21.4+ or 2.4.1+\n- Upgrade PHP C Extension (ext-mongodb) to 1.21.6+ or 2.4.1+\n- Validate and sanitize user-supplied database and collection identifiers using alphanumeric allowlists\n- Restrict application database user privileges to prevent access to administrative namespaces\n\n**Remediation Steps:**\n1. Identify any database queries where database or collection identifiers are dynamically constructed from client input\n2. Update Composer dependencies to pull mongodb/mongodb version 1.21.4 or 2.4.1\n3. Upgrade the native PECL extension using: pecl install mongodb-1.21.6 (or 2.4.1)\n4. Implement local input validation utilizing str_contains() or regular expressions to reject dots and null bytes on old versions\n\n## References\n\n- [MongoDB JIRA PHPLIB-1927](https://jira.mongodb.org/browse/PHPLIB-1927)\n- [MongoDB PHP Library 1.21.4 Release](https://github.com/mongodb/mongo-php-library/releases/tag/1.21.4)\n- [MongoDB PHP Library 2.4.1 Release](https://github.com/mongodb/mongo-php-library/releases/tag/2.4.1)\n- [MongoDB PHP Driver 1.21.6 Release](https://github.com/mongodb/mongo-php-driver/releases/tag/1.21.6)\n- [MongoDB PHP Driver 2.4.1 Release](https://github.com/mongodb/mongo-php-driver/releases/tag/2.4.1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-81525) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-09T10:33:18.416562Z"} {"uuid": "9239e7cf-386e-4b82-8fb5-872e76a90ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81525", "type": "seen", "source": "https://gist.github.com/alon710/5fa9ee3aa8e2d98c87b91ce0095db96e", "content": "# CVE-2026-81525: CVE-2026-81525: Cross-Tenant Database Retargeting via Dot and Null Injection in MongoDB PHP Driver\n\n> **CVSS Score:** 8.6\n> **Published:** 2026-09-08\n> **Full Report:** https://cvereports.com/reports/CVE-2026-81525\n\n## Summary\nA high-severity namespace injection vulnerability in both the MongoDB Client Library for PHP (mongodb/mongodb) and the native PHP C Extension (ext-mongodb) allows unauthenticated remote attackers to bypass logical database separation and execute database commands inside unauthorized storage compartments via dot (\".\") and null byte (\"\\0\") injection.\n\n## TL;DR\nImproper input validation in MongoDB's PHP libraries allows attackers to inject dot characters and null bytes into database and collection name parameters, silently retargeting database queries and writes to administrative or system collections.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-943: Improper Neutralization of Special Elements in Data Query Logic\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0 Score**: 8.6 (High)\n- **EPSS Score**: 0.00273 (19.38th Percentile)\n- **Impact**: Logical Security Boundary Bypass / Multi-Tenant Retargeting\n- **Exploit Status**: Proof-of-Concept (PoC) Released\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- MongoDB Client Library for PHP (mongodb/mongodb)\n- MongoDB PHP C Extension (ext-mongodb)\n- **mongodb/mongodb**: < 1.21.4 (Fixed in: `1.21.4`)\n- **mongodb/mongodb**: >= 2.0.0, < 2.4.1 (Fixed in: `2.4.1`)\n- **ext-mongodb**: < 1.21.6 (Fixed in: `1.21.6`)\n- **ext-mongodb**: >= 2.0.0, < 2.4.1 (Fixed in: `2.4.1`)\n\n## Mitigation\n\n- Upgrade MongoDB PHP Client Library to 1.21.4+ or 2.4.1+\n- Upgrade PHP C Extension (ext-mongodb) to 1.21.6+ or 2.4.1+\n- Validate and sanitize user-supplied database and collection identifiers using alphanumeric allowlists\n- Restrict application database user privileges to prevent access to administrative namespaces\n\n**Remediation Steps:**\n1. Identify any database queries where database or collection identifiers are dynamically constructed from client input\n2. Update Composer dependencies to pull mongodb/mongodb version 1.21.4 or 2.4.1\n3. Upgrade the native PECL extension using: pecl install mongodb-1.21.6 (or 2.4.1)\n4. Implement local input validation utilizing str_contains() or regular expressions to reject dots and null bytes on old versions\n\n## References\n\n- [MongoDB JIRA PHPLIB-1927](https://jira.mongodb.org/browse/PHPLIB-1927)\n- [MongoDB PHP Library 1.21.4 Release](https://github.com/mongodb/mongo-php-library/releases/tag/1.21.4)\n- [MongoDB PHP Library 2.4.1 Release](https://github.com/mongodb/mongo-php-library/releases/tag/2.4.1)\n- [MongoDB PHP Driver 1.21.6 Release](https://github.com/mongodb/mongo-php-driver/releases/tag/1.21.6)\n- [MongoDB PHP Driver 2.4.1 Release](https://github.com/mongodb/mongo-php-driver/releases/tag/2.4.1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-81525) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-09T10:33:18.416562Z"} https://vulnerability.circl.lu/sighting/9239e7cf-386e-4b82-8fb5-872e76a90ec3/export Wed, 09 Sep 2026 10:33:18 +0000 https://vulnerability.circl.lu/sighting/ef0a5220-23d7-4a25-b33c-03e81f54a4d7/export {"uuid": "ef0a5220-23d7-4a25-b33c-03e81f54a4d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81520", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117179191206375825", "content": "CVE-2026-81520 - DoS vulnerability in MongoDB Connector for BI allows unauthenticated resource exhaustion. CVSS 7.5. Restrict access immediately. #CVE #MongoDB #infosec\nhttps://www.valtersit.com/cve/CVE-2026-81520/", "creation_timestamp": "2026-08-29T14:09:28.098520Z"} {"uuid": "ef0a5220-23d7-4a25-b33c-03e81f54a4d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81520", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117179191206375825", "content": "CVE-2026-81520 - DoS vulnerability in MongoDB Connector for BI allows unauthenticated resource exhaustion. CVSS 7.5. Restrict access immediately. #CVE #MongoDB #infosec\nhttps://www.valtersit.com/cve/CVE-2026-81520/", "creation_timestamp": "2026-08-29T14:09:28.098520Z"} https://vulnerability.circl.lu/sighting/ef0a5220-23d7-4a25-b33c-03e81f54a4d7/export Sat, 29 Aug 2026 14:09:28 +0000 https://vulnerability.circl.lu/sighting/aec650c4-f6f6-4a92-81c9-560be992621a/export {"uuid": "aec650c4-f6f6-4a92-81c9-560be992621a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81520", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mua2is4qhj25", "content": "CVE-2026-81520 - DoS vulnerability in MongoDB Connector for BI allows unauthenticated resource exhaustion. CVSS 7.5. Restrict access immediately. #CVE #MongoDB #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-81520/", "creation_timestamp": "2026-08-29T14:09:21.328450Z"} {"uuid": "aec650c4-f6f6-4a92-81c9-560be992621a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81520", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mua2is4qhj25", "content": "CVE-2026-81520 - DoS vulnerability in MongoDB Connector for BI allows unauthenticated resource exhaustion. CVSS 7.5. Restrict access immediately. #CVE #MongoDB #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-81520/", "creation_timestamp": "2026-08-29T14:09:21.328450Z"} https://vulnerability.circl.lu/sighting/aec650c4-f6f6-4a92-81c9-560be992621a/export Sat, 29 Aug 2026 14:09:21 +0000 https://vulnerability.circl.lu/sighting/610860be-a42b-43c3-81ec-7ffc8dc85b36/export {"uuid": "610860be-a42b-43c3-81ec-7ffc8dc85b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81520", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu73uf3kgl22", "content": "\ud83d\udfe0 CVE-2026-81520 - High (7.5)\n\nA network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI aut...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81520/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T05:01:05.157468Z"} {"uuid": "610860be-a42b-43c3-81ec-7ffc8dc85b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81520", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu73uf3kgl22", "content": "\ud83d\udfe0 CVE-2026-81520 - High (7.5)\n\nA network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI aut...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81520/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T05:01:05.157468Z"} https://vulnerability.circl.lu/sighting/610860be-a42b-43c3-81ec-7ffc8dc85b36/export Sat, 29 Aug 2026 05:01:05 +0000 https://vulnerability.circl.lu/sighting/f7ae363c-942f-4596-bdd8-74692792f5fd/export {"uuid": "f7ae363c-942f-4596-bdd8-74692792f5fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81525", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu5ur4nnfl2a", "content": "Discover the details of recent MongoDB security vulnerabilities affecting drivers and BI connectors. Update your systems to patch CVE-2026-81525 and others.\n\n#MongoDB #Cybersecurity #Vulnerability #CVE202681525 #DatabaseSecurity", "creation_timestamp": "2026-08-28T17:21:19.188761Z"} {"uuid": "f7ae363c-942f-4596-bdd8-74692792f5fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81525", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu5ur4nnfl2a", "content": "Discover the details of recent MongoDB security vulnerabilities affecting drivers and BI connectors. Update your systems to patch CVE-2026-81525 and others.\n\n#MongoDB #Cybersecurity #Vulnerability #CVE202681525 #DatabaseSecurity", "creation_timestamp": "2026-08-28T17:21:19.188761Z"} https://vulnerability.circl.lu/sighting/f7ae363c-942f-4596-bdd8-74692792f5fd/export Fri, 28 Aug 2026 17:21:19 +0000 https://vulnerability.circl.lu/sighting/46ba6cf9-8650-4e6e-a8bc-692e21c870c9/export {"uuid": "46ba6cf9-8650-4e6e-a8bc-692e21c870c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81529", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-3", "content": "", "creation_timestamp": "2026-08-28T12:45:57.841319Z"} {"uuid": "46ba6cf9-8650-4e6e-a8bc-692e21c870c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81529", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-3", "content": "", "creation_timestamp": "2026-08-28T12:45:57.841319Z"} https://vulnerability.circl.lu/sighting/46ba6cf9-8650-4e6e-a8bc-692e21c870c9/export Fri, 28 Aug 2026 12:45:57 +0000 https://vulnerability.circl.lu/sighting/2285b494-f441-4841-a00c-8549d92009c2/export {"uuid": "2285b494-f441-4841-a00c-8549d92009c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81526", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-3", "content": "", "creation_timestamp": "2026-08-28T12:45:55.559704Z"} {"uuid": "2285b494-f441-4841-a00c-8549d92009c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81526", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-3", "content": "", "creation_timestamp": "2026-08-28T12:45:55.559704Z"} https://vulnerability.circl.lu/sighting/2285b494-f441-4841-a00c-8549d92009c2/export Fri, 28 Aug 2026 12:45:55 +0000 https://vulnerability.circl.lu/sighting/5090e7d4-355a-404b-ba83-0dc4fa686d05/export {"uuid": "5090e7d4-355a-404b-ba83-0dc4fa686d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81525", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-3", "content": "", "creation_timestamp": "2026-08-28T12:45:52.315746Z"} {"uuid": "5090e7d4-355a-404b-ba83-0dc4fa686d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81525", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-3", "content": "", "creation_timestamp": "2026-08-28T12:45:52.315746Z"} https://vulnerability.circl.lu/sighting/5090e7d4-355a-404b-ba83-0dc4fa686d05/export Fri, 28 Aug 2026 12:45:52 +0000 https://vulnerability.circl.lu/sighting/d40b306a-ae40-49bb-ba38-4a58e3522c47/export {"uuid": "d40b306a-ae40-49bb-ba38-4a58e3522c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81522", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-3", "content": "", "creation_timestamp": "2026-08-28T12:45:46.906344Z"} {"uuid": "d40b306a-ae40-49bb-ba38-4a58e3522c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81522", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-3", "content": "", "creation_timestamp": "2026-08-28T12:45:46.906344Z"} https://vulnerability.circl.lu/sighting/d40b306a-ae40-49bb-ba38-4a58e3522c47/export Fri, 28 Aug 2026 12:45:46 +0000 https://vulnerability.circl.lu/sighting/8ad1a25e-2761-4a89-b60d-a361b75da557/export {"uuid": "8ad1a25e-2761-4a89-b60d-a361b75da557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81521", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-3", "content": "", "creation_timestamp": "2026-08-28T12:45:44.563752Z"} {"uuid": "8ad1a25e-2761-4a89-b60d-a361b75da557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81521", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-3", "content": "", "creation_timestamp": "2026-08-28T12:45:44.563752Z"} https://vulnerability.circl.lu/sighting/8ad1a25e-2761-4a89-b60d-a361b75da557/export Fri, 28 Aug 2026 12:45:44 +0000