What’s Vulnerable › Products

MongoDB C++ Driver vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your MongoDB C++ Driver version is affected

Latest MongoDB C++ Driver vulnerabilities

• CVE-2026-106430 — Query and rename target confusion via embedded NUL truncation in MongoDB C++ Driver (CVSS 5.9)
• CVE-2026-88034 — GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C++ Driver (CVSS 8.3)
• CVE-2026-84966 — BSON element injection via NUL-embedded document keys in builder append (CVSS 5.5)
• CVE-2026-84970 — Heap over-read or silent misparse via 32-bit truncation of JSON length in BSON JSON parser (CVSS 5.8)
• CVE-2026-81522 — Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ Driver (CVSS 8.1)