Laravel MongoDB (PHP) — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Laravel MongoDB (PHP), with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-96744	Unauthorized cache lock takeover via expression injection in lock owner values in MongoDB integration for Laravel CWE-943	7.1	High	2026-09-24
CVE-2026-88028	Unauthorized document disclosure via query-operator injection in polymorphic relation identifiers in MongoDB integration for Laravel CWE-943	6.5	Medium	2026-09-10
CVE-2026-88027	Mass deletion and overwrite of embedded documents via query-operator injection in embedded record keys in MongoDB integration for Laravel CWE-943	7.1	High	2026-09-10
CVE-2026-88022	Unauthorized document disclosure and deletion via query-operator injection in explicit equality filters in MongoDB integration for Laravel CWE-943	7.7	High	2026-09-10

All 4 known CVE vulnerabilities affecting Laravel MongoDB (PHP) with full Chinese analysis, references, and POCs where available.