CVE-2026-92758

EUVD-2026-82380
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information (if in use) such as passwords and AWS secure access keys.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 4.24%
Affected Products (NVD)
VendorProductVersion
mongodbentity_framework_core_provider
8.0.0 ≤
𝑥
< 8.4.4
mongodbentity_framework_core_provider
9.0.0 ≤
𝑥
< 9.1.4
mongodbentity_framework_core_provider
10.0.0 ≤
𝑥
< 10.0.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://jira.mongodb.org/browse/EF-384