CyberRota Analysis
AI-GeneratedMongoDB is vulnerable when logging mode is set to DEBUG or when a malformed connection string is utilized, potentially exposing sensitive information like passwords and AWS secure access keys in application logs. This could lead to unauthorized access or data breaches if the logs are improperly secured. Organizations using MongoDB should prioritize addressing this vulnerability, particularly those handling sensitive data or operating in regulated environments.
CVE
CVE-2026-92758
Severity
MEDIUM
CVSS
5.5
EPSS
0.15%
MongoDB
Original NVD Description
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information (if in use) such as passwords and AWS secure access keys.
Related CVEs
Other vulnerabilities affecting the same vendor(s)