Vulnerability Details CVE-2026-6811
Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSON documents in unusual circumstances when the source of these BSON documents is not MongoDB Server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 30.6%
CVSS Severity
CVSS v3 Score 5.9
References
Products affected by CVE-2026-6811
-
cpe:2.3:a:mongodb:php_driver:1.21.0
-
cpe:2.3:a:mongodb:php_driver:1.21.1
-
cpe:2.3:a:mongodb:php_driver:1.21.2
-
cpe:2.3:a:mongodb:php_driver:1.21.4
-
cpe:2.3:a:mongodb:php_driver:2.1.0
-
cpe:2.3:a:mongodb:php_driver:2.1.1
-
cpe:2.3:a:mongodb:php_driver:2.1.2
-
cpe:2.3:a:mongodb:php_driver:2.1.3
-
cpe:2.3:a:mongodb:php_driver:2.1.4
-
cpe:2.3:a:mongodb:php_driver:2.1.7