MongoDB Bi Connector
7 CVEs affecting MongoDB Bi Connector. Latest disclosed: 2026-08-28. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-77586 | High | 8.0 | 2026-08-28 | In MongoDB Connector for BI, MongoDB object names such as collection, field, and index names are placed into the quoted identifiers of the DDL text returned by… |
CVE-2026-81490 | High | 7.7 | 2026-08-28 | A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by definin… |
CVE-2026-81520 | High | 7.5 | 2026-08-28 | A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session open indefinitely by beginning a SASL-base… |
CVE-2026-81518 | High | 7.5 | 2026-08-28 | When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not require… |
CVE-2026-81517 | High | 7.5 | 2026-08-28 | An unauthenticated party able to reach the port of a MongoDB Connector for BI (mongosqld) instance may generate enough routine connection log activity to exhau… |
CVE-2026-75159 | Medium | 5.9 | 2026-08-27 | An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a… |
CVE-2026-77184 | Medium | 5.2 | 2026-08-28 | In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CRE… |