What is CVE-2026-92758?

CVE-2026-92758 is a medium-severity vulnerability in MongoDB Inc. Entity Framework Core Provider, classified under Insertion of Sensitive Information into Log File. CVSS score: 5.5/10. Published 2026-09-17.

How severe is CVE-2026-92758?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Information disclosure in MongoDB Inc. Entity Framework Core Provider

CVE-2026-92758

If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information (if in use) such as passwords and AWS secure access keys.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Mongodb Inc. Entity Framework Core Provider

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

cna@mongodb.com

Frequently asked questions

What is CVE-2026-92758?: CVE-2026-92758 is a medium-severity vulnerability in MongoDB Inc. Entity Framework Core Provider, classified under Insertion of Sensitive Information into Log File. CVSS score: 5.5/10. Published 2026-09-17.
How severe is CVE-2026-92758?: Medium severity. CVSS v3 base score is 5.5 out of 10.