product of mongodb

bi connector

8 thingsrelated by NVD

Severity

high 6 medium 2

Being told

Watch: its feed Ask more of it

The feed says each thing that enters, leaves or changes; a reader adds its address, /zetlyn/trackers/cve/things.atom?q=…, to theirs.

Every thing

A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session open indefinitely by… CVE-2026-81520	Severity high
When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake… CVE-2026-81518	Severity high
An unauthenticated party able to reach the port of a MongoDB Connector for BI (mongosqld) instance may generate enough routine connection… CVE-2026-81517	Severity high
A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop… CVE-2026-81490	Severity high
In MongoDB Connector for BI, MongoDB object names such as collection, field, and index names are placed into the quoted identifiers of the… CVE-2026-77586	Severity high
In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL… CVE-2026-77184	Severity medium
In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both… CVE-2026-75573	Severity medium
An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld… CVE-2026-75159	Severity high