Mongodb Inc. Mongodb Entity Framework Core Provider vulnerabilities

3 vulnerabilities

Known vulnerabilities in Mongodb Inc. Mongodb Entity Framework Core Provider, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.7CVE-2026-92758mongodb inc.mongodb entity framework core provider+1
EPSS score
0.15%
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information (if in use) such as passwords and AWS secure access keys.6.8CVE-2026-92757mongodb inc.mongodb entity framework core provider+1
EPSS score
0.07%
Applications built on MongoDB Entity Framework Core Provider which place a database name in the connection string may inadvertently disable field level encryption.6.8CVE-2026-92756mongodb inc.mongodb entity framework core provider+1
EPSS score
0.07%
Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database.