All 6 CVE vulnerabilities found in libmongocrypt, with AI-generated Chinese analysis, references, and POCs.
Vendor: MongoDB
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-106434 | Unrecognized payload acceptance in explicit decryption in MongoDB libmongocrypt CWE-354 | 4.3 | Medium | 2026-10-08 |
| CVE-2026-106433 | Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt CWE-843 | 8.8 | High | 2026-10-08 |
| CVE-2026-106429 | Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt CWE-191 | 6.5 | Medium | 2026-10-08 |
| CVE-2026-84962 | Authenticated KMS request forgery via CRLF injection in GCP key identifier strings CWE-93 | 4.2 | Medium | 2026-09-03 |
| CVE-2026-84971 | Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path CWE-617 | 6.5 | Medium | 2026-09-03 |
| CVE-2026-81523 | Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt CWE-74 | 4.4 | Medium | 2026-08-27 |
All 6 known CVE vulnerabilities affecting libmongocrypt with full Chinese analysis, references, and POCs where available.