CVE-2026-114652 Update operator injection via single-element list rewriting in the update builder

A data-query-logic neutralization weakness in the update-statement construction component of the MongoDB C Driver can cause application-supplied values to be interpreted as query/update logic rather than as literal data. An application user who can influence the content of values that the...

CVE-2026-114652

The MongoDB C# Driver contains a data-query-logic neutralization weakness within the update-statement construction component . This vulnerability allows an attacker who can influence application-supplied values to have those values interpreted as query/update logic rather than literal data. A use...