Index
Search
Search the public record. Drafts and scheduled notes are not included.
High
research
Two MongoDB driver bugs are not confirmed code execution
CVE-2026-96748 lets an untrusted hostname add a server to a PyMongo client. CVE-2026-96746 can crash the C driver. Both are scored 8.3. Neither NVD text is arbitrary code execution, and neither is in the CISA catalog.
Published 2h ago
HighNo PoC
CVE-2026-96748
PyMongo connection-string host injection
Other
Published 11d ago
HighNo PoC
CVE-2026-96746
MongoDB C driver connection-monitor overflow
DoS
Published 11d ago