CVE-2026-9100
Vulnerability in Mongodb C Driver
CVSS score
7.1
EPSS probability
%0.3
Risk score
0.0
Published
4 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.2
CVE-2026-93762
Data deletion and attribute disclosure via field-name method injection in in-memory queries
MI
Patch status unknownEPSS %1
9.5
CVE-2026-19001
MongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object names
M
Patch status unknownEPSS %1
7.2
CVE-2026-8431
Command injection in Mongodb Ops Manager
M
Patch status unknownEPSS %1
7.7
CVE-2026-18692
Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution
M
Patch status unknownEPSS %1
8.3
CVE-2026-93760
NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guard
MI
Patch status unknownEPSS %1
8.8
CVE-2026-19004
MongoDB BI Connector ODBC Driver Memory-Safety Issue When Handling Stored Procedure Output Parameters
M
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-9100"