What’s Vulnerable › Products

MongoDB Inc MongoDB .NET/C# Driver vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your MongoDB Inc MongoDB .NET/C# Driver version is affected

Latest MongoDB Inc MongoDB .NET/C# Driver vulnerabilities

• CVE-2026-88026 — Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver (CVSS 6.5)
• CVE-2026-88025 — GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# Driver (CVSS 8.3)
• CVE-2026-81530 — KMS master key exposure via unredacted credential serialization in driver settings string (CVSS 5.6)
• CVE-2026-81529 — Connection-option injection via unescaped settings in the canonical MongoDB URL builder (CVSS 7.1)
• CVE-2026-81528 — NoSQL injection via array replacement bypassing update shape validation in driver write path (CVSS 5.4)
• CVE-2026-81527 — NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation (CVSS 6.5)
• CVE-2022-48282 — Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution (CVSS 7.2)
• CVE-2021-20331 — MongoDB C# Driver may publish events containing authentication-related data to a command listener configured by an application (CVSS 4.9)