MongoDB Connector for BI Improper Error Handling of Log Write Failures May Cause Loss of SQL Service

An unauthenticated party able to reach the port of a MongoDB Connector for BI mongosqld instance may generate enough routine connection log activity to exhaust the storage backing the configured log path. When a log write or log rotation operation subsequently fails, the resulting error is not...

CVE-2026-81517

CVE-2026-81517 affects MongoDB Connector for BI (mongosqld) . An unauthenticated network attacker can exhaust storage on the configured log path simply by generating routine connection log activity. When a subsequent log write or rotation fails, the error is not handled , causing the shared mongo...

CVE-2026-81490 MongoDB Connector for BI Improper Error Handling During Schema Sampling May Cause Loss of SQL Service

A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by defining a view whose evaluation reliably fails. The sampling logic classifies the resulting server message as transient and, after the configure...

CVE-2026-81490

MongoDB Connector for BI (mongosqld) contains an improper error handling flaw in its schema-sampling routine. A database user who can create a view in a sampled namespace can define a view whose evaluation reliably fails. The sampling logic misclassifies the resulting server message as transient ...

MongoDB Connector for BI Improper Error Handling During Schema Sampling May Cause Loss of SQL Service

A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by defining a view whose evaluation reliably fails. The sampling logic classifies the resulting server message as transient and, after the configure...

CVE-2026-77586 MongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE Output

In MongoDB Connector for BI, MongoDB object names such as collection, field, and index names are placed into the quoted identifiers of the DDL text returned by SHOW CREATE statements without escaping the identifier delimiter. A user with permission to write to a sampled MongoDB collection can...

MongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE Output

In MongoDB Connector for BI, MongoDB object names such as collection, field, and index names are placed into the quoted identifiers of the DDL text returned by SHOW CREATE statements without escaping the identifier delimiter. A user with permission to write to a sampled MongoDB collection can...

EUVD-2026-67780

In MongoDB Connector for BI, MongoDB object names such as collection, field, and index names are placed into the quoted identifiers of the DDL text returned by SHOW CREATE statements without escaping the identifier delimiter. A user with permission to write to a sampled MongoDB collection can...

CVE-2026-77586

In MongoDB Connector for BI , object names (collections, fields, indexes) are embedded into the DDL output of SHOW CREATE statements without escaping the identifier delimiter. A user with write access to a sampled collection can craft a name that closes the quoted identifier early, injecting arbi...

CVE-2026-77184 MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE Output

In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements without complete escaping of backslash characters. A user with permission to modify a collection's schema validator, in...

EUVD-2026-67779

In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements without complete escaping of backslash characters. A user with permission to modify a collection's schema validator, in...

MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE Output

In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements without complete escaping of backslash characters. A user with permission to modify a collection's schema validator, in...

CVE-2026-77184

MongoDB Connector for BI is affected by an incomplete escaping flaw: the description text of a collection's JSON schema validator is incorporated into the comment text of DDL returned by SHOW CREATE statements without fully escaping backslash characters. An attacker with permission to modify a co...

CVE-2026-76798

The MongoSQL Transition Readiness Tool (part of MongoDB's SQL/BI Connector stack) writes query text and user names from BI Connector log files into its generated HTML reports without encoding them for the HTML output context. An attacker with low privileges who can issue queries through the BI Co...

CVE-2026-76798 MongoSQL Transition Readiness Tool Improper Output Encoding in Generated HTML Reports

The MongoSQL Transition Readiness Tool writes query text and user names read from BI Connector log files into its generated HTML report without encoding them for that output context. A user able to issue queries through the BI Connector can influence log content so that markup supplied in a query...

EUVD-2026-67778

The MongoSQL Transition Readiness Tool writes query text and user names read from BI Connector log files into its generated HTML report without encoding them for that output context. A user able to issue queries through the BI Connector can influence log content so that markup supplied in a query...

MongoSQL Transition Readiness Tool Improper Output Encoding in Generated HTML Reports

The MongoSQL Transition Readiness Tool writes query text and user names read from BI Connector log files into its generated HTML report without encoding them for that output context. A user able to issue queries through the BI Connector can influence log content so that markup supplied in a query...

CVE-2026-76794 MongoDB BI Connector Transition Readiness Report Improper HTML Encoding When Processing Database Metadata

MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML. A MongoDB user with write access can introduce crafted metadata that may cause script code to run when another user generates and opens the report, potentially exposing report...

MongoDB BI Connector Transition Readiness Report Improper HTML Encoding When Processing Database Metadata

MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML. A MongoDB user with write access can introduce crafted metadata that may cause script code to run when another user generates and opens the report, potentially exposing report...

CVE-2026-76794

MongoSQL Transition Readiness Tool (part of the MongoDB BI Connector) contains an improper HTML encoding flaw when processing database metadata. A MongoDB user with write access can inject crafted metadata that, when another user generates and opens the Transition Readiness Report, may cause scri...