CVE-2026-19502

CVE-2026-19502 affects MongoDB SQL Schema Builder CLI. The issue is insufficient redaction of sensitive startup/connection configuration in diagnostic output (stdout and log files), allowing a local user with access to terminals or logs to view authentication material. The documentation provided ...

CVE-2026-19503

CVE-2026-19503 affects MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver. The issue arises from insufficient validation of the scheme for authorization and token endpoints returned in an OIDC issuer’s discovery document, allowing a user connected to an uncontrolled MongoDB deployment using...