What’s Vulnerable › Vulnerabilities
CVE-2026-6811: PHP Stack Exhaustion
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-05-14 · updated 2026-10-26
- Weakness: CWE-674
Description
Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSON documents in unusual circumstances when the source of these BSON documents is not MongoDB Server.
Affected products
- MongoDB PHP Driver: from 1.21.0 before 1.21.5; from 2.1.0 before 2.1.8 — fixed in 1.21.5, 2.1.8
How to fix
Upgrade to a fixed version: MongoDB PHP Driver 1.21.5, 2.1.8. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-6811 or the next vulnerability affects your stack