SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-88026

MEDIUM · CVSS 6.5 EPSS 0.22%

Source: NVD + CISA KEV + EPSS · Published 2026-09-10 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The MongoDB C# Driver is vulnerable due to improper handling of regular-expression metacharacters, allowing authenticated users to manipulate query parameters. This can lead to unauthorized access to records that should be restricted by the original filter. Organizations using the affected MongoDB C# Driver should prioritize remediation to mitigate potential data exposure risks.

CVE
CVE-2026-88026
Severity
MEDIUM
CVSS
6.5
EPSS
0.22%
MongoDB

Original NVD Description

Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C# Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected application. An authenticated user who can influence such a value may cause the application to return records beyond those intended by the original filter.