{"id":"CVE-2026-114648","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-114648","generatedAt":"2026-10-28T01:03:23.170Z","title":"An application user whose input reaches these positions can redirect a query or update to fields the application did not name, which can expose other users' documents and widen updates beyond the intended data.","description":"The MongoDB C# Driver does not neutralize dot and dollar characters in dictionary keys, field names and array-filter identifiers used in LINQ queries before placing them into the field paths it sends to the server. An application user whose input reaches these positions can redirect a query or update to fields the application did not name, which can expose other users' documents and widen updates beyond the intended data. Certain values can also write malformed fields that leave stored documents unreadable by the application until they are repaired.","published":"2026-10-22T19:17:39.000Z","lastModified":"2026-10-23T19:45:04.000Z","status":"Awaiting Analysis","sourceIdentifier":"cna@mongodb.com","cvss":{"version":"4.0","score":7.2,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-943"],"affected":[],"epss":{"score":0.00321,"percentile":0.24896,"date":"2026-10-26","history":[{"date":"2026-10-23","score":0.00321,"percentile":0.23917}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.32%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-22T19:17:39.000Z","detail":{"score":"7.2","severity":"HIGH","publishedAt":"2026-10-22T19:17:38.567Z"},"summary":"New CVE, high severity (CVSS 7.2)."}],"references":[{"url":"https://github.com/mongodb/mongo-csharp-driver/releases/tag/v3.13.0","source":"cna@mongodb.com"},{"url":"https://github.com/mongodb/mongo-csharp-driver/security/advisories/GHSA-2xqr-fxmx-2cmf","source":"cna@mongodb.com"},{"url":"https://jira.mongodb.org/browse/CSHARP-6181","source":"cna@mongodb.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-114648","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}