CVE-2026-114649

The MongoDB C# Driver is vulnerable to an authentication bypass due to insufficient certificate validation when managing cached connections. The driver incorrectly compares TLS client certificates using only the issuer and serial number . An attacker can provide a certificate mimicking another us...