Mongodb Php Driver — known CVE vulnerabilities

Every CVE whose affected-product data names Mongodb Php Driver, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2026-81525 — CVSS 8.1 (high): The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before…
• CVE-2024-7553 — CVSS 7.3 (high): Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating…
• CVE-2025-12119 — CVSS 6.8 (medium): A mongoc_bulk_operation_t may read invalid memory if large options are passed.
• CVE-2026-6811 — CVSS 5.9 (medium): Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSON documents in…
• CVE-2026-84968 — CVSS 5.3 (medium): An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially…
• CVE-2021-32050 — CVSS 4.2 (medium): Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an…