CVE-2026-9735— Keyfile contents are in MongoDB Server logs
Possible ATT&CK Techniques 1AI
T1530 · Data from Cloud StorageAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| MongoDB | MongoDB Server | 8.3.0< 8.3.3 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-9735
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Keyfile contents are in MongoDB Server logs
Source: CVE Program / CVE List V5
Vulnerability Description
MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric logging is enabled, the full authentication parameters are written to the log without redaction.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过日志文件的信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
MongoDB Server 日志信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MongoDB Server是美国MongoDB公司的一套开源的NoSQL数据库。该数据库提供面向集合的存储、动态查询、数据复制及自动故障转移等功能。 MongoDB Server存在日志信息泄露漏洞，该漏洞源于SASL身份验证期间可能将认证参数包括凭据记录到服务器日志，且启用连接健康指标日志记录时未对完整认证参数进行脱敏处理。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MongoDB | MongoDB Server | 8.3.0 ~ 8.3.3 | - |
II. Public POCs for CVE-2026-9735
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-9735
请登录查看更多情报信息。
Same Patch Batch · MongoDB · 2026-06-09 · 14 CVEs total
| CVE-2026-9753 | 8.1 HIGH | Server crash via malformed binary diff passed to $_internalApplyOplogUpdate. |
| CVE-2026-9740 | 7.5 HIGH | Unbounded recursion in BSONColumn interleaved-reference causes pre-auth stack overflow |
| CVE-2026-9742 | 7.5 HIGH | Authenticate command with specific mechanism parameter can trigger server crash |
| CVE-2026-9750 | 6.5 MEDIUM | Metadata name collision on $-prefixed fields causes post-auth server crash |
| CVE-2026-9748 | 6.5 MEDIUM | $_internalConvertBucketIndexStats may crash the mongod server when working on no timeserie |
| CVE-2026-9747 | 6.5 MEDIUM | Crafted cross-shard merge aggregation crashes MongoDB Server |
| CVE-2026-9741 | 6.5 MEDIUM | Client side encryption fails to encrypt values in a $vectorSearch |
| CVE-2026-9749 | 6.5 MEDIUM | Using MaxKey() may crash the server |
| CVE-2026-9752 | 6.5 MEDIUM | GeometryCollection with strict-winding polygon causes server crash during 2dsphere index k |
| CVE-2026-9746 | 6.5 MEDIUM | Server crashes in case of the use of exchange |
| CVE-2026-9743 | 6.5 MEDIUM | Aggregation sub-pipeline null dereference may allow DoS via crafted getMore |
| CVE-2026-9754 | 6.5 MEDIUM | Stack memory disclosure in filemd5 command |
| CVE-2026-9751 | 5.5 MEDIUM | Sensitive data could be written to mongod.log |
IV. Related Vulnerabilities
Same product: MongoDB Server
- CVE-2026-18712
Improper Authorization in MongoDB Queryable Encryption Maint - CVE-2026-18711
Use-After-Free in MongoDB Query Execution Engine Leads to De - CVE-2026-18709
Missing Authorization in MongoDB Sharded Transaction Commit/ - CVE-2026-18698
Improper Authorization in MongoDB Server Allows Unauthorized - CVE-2026-18690
Improper Authorization in MongoDB Server Allows Unauthorized
Same vendor: MongoDB
- CVE-2026-18710
Cleartext Storage of Sensitive Information in MongoDB Driver - CVE-2026-18712
Improper Authorization in MongoDB Queryable Encryption Maint - CVE-2026-18711
Use-After-Free in MongoDB Query Execution Engine Leads to De - CVE-2026-18709
Missing Authorization in MongoDB Sharded Transaction Commit/ - CVE-2026-18698
Improper Authorization in MongoDB Server Allows Unauthorized
Same weakness: CWE-532
- CVE-2026-18710
Cleartext Storage of Sensitive Information in MongoDB Driver - CVE-2026-71474
Insights-client-rhel9: insights-client: pull-secret bearer t - CVE-2026-71845
Insights-client: insights-client: ccx_token bearer credentia - CVE-2026-65945
Apache Ranger: Logs contain replayable JWT bearer tokens - CVE-2026-19363
lmammino oidc-authorizer Lambda Authorizer handler.rs log fi
V. Comments for CVE-2026-9735
No comments yet