Vulnerability Details CVE-2026-81522
A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from untrusted input without validating it may therefore have its operation directed at a different target than intended. This can result in limited unauthorized read and write access to data belonging to another logical tenant of the affected application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 40.1%
CVSS Severity
CVSS v3 Score 8.1
References
Products affected by CVE-2026-81522
-
cpe:2.3:a:mongodb:c++_driver:3.0.0
-
cpe:2.3:a:mongodb:c++_driver:3.0.1
-
cpe:2.3:a:mongodb:c++_driver:3.0.2
-
cpe:2.3:a:mongodb:c++_driver:3.0.3
-
cpe:2.3:a:mongodb:c++_driver:3.1.0
-
cpe:2.3:a:mongodb:c++_driver:3.1.1
-
cpe:2.3:a:mongodb:c++_driver:3.1.2
-
cpe:2.3:a:mongodb:c++_driver:3.1.3
-
cpe:2.3:a:mongodb:c++_driver:3.1.4
-
cpe:2.3:a:mongodb:c++_driver:3.10.0
-
cpe:2.3:a:mongodb:c++_driver:3.10.1
-
cpe:2.3:a:mongodb:c++_driver:3.10.2
-
cpe:2.3:a:mongodb:c++_driver:3.11.0
-
cpe:2.3:a:mongodb:c++_driver:3.11.1
-
cpe:2.3:a:mongodb:c++_driver:3.2.0
-
cpe:2.3:a:mongodb:c++_driver:3.2.1
-
cpe:2.3:a:mongodb:c++_driver:3.3.0
-
cpe:2.3:a:mongodb:c++_driver:3.3.1
-
cpe:2.3:a:mongodb:c++_driver:3.3.2
-
cpe:2.3:a:mongodb:c++_driver:3.4.0
-
cpe:2.3:a:mongodb:c++_driver:3.4.1
-
cpe:2.3:a:mongodb:c++_driver:3.4.2
-
cpe:2.3:a:mongodb:c++_driver:3.5.0
-
cpe:2.3:a:mongodb:c++_driver:3.5.1
-
cpe:2.3:a:mongodb:c++_driver:3.6.0
-
cpe:2.3:a:mongodb:c++_driver:3.6.1
-
cpe:2.3:a:mongodb:c++_driver:3.6.2
-
cpe:2.3:a:mongodb:c++_driver:3.6.3
-
cpe:2.3:a:mongodb:c++_driver:3.6.4
-
cpe:2.3:a:mongodb:c++_driver:3.6.5
-
cpe:2.3:a:mongodb:c++_driver:3.6.6
-
cpe:2.3:a:mongodb:c++_driver:3.6.7
-
cpe:2.3:a:mongodb:c++_driver:3.7.0
-
cpe:2.3:a:mongodb:c++_driver:3.7.1
-
cpe:2.3:a:mongodb:c++_driver:3.7.2
-
cpe:2.3:a:mongodb:c++_driver:3.8.0
-
cpe:2.3:a:mongodb:c++_driver:3.8.1
-
cpe:2.3:a:mongodb:c++_driver:3.9.0
-
cpe:2.3:a:mongodb:c++_driver:4.0.0
-
cpe:2.3:a:mongodb:c++_driver:4.1.0
-
cpe:2.3:a:mongodb:c++_driver:4.1.1
-
cpe:2.3:a:mongodb:c++_driver:4.1.2
-
cpe:2.3:a:mongodb:c++_driver:4.1.3
-
cpe:2.3:a:mongodb:c++_driver:4.1.4
-
cpe:2.3:a:mongodb:c++_driver:4.2.0
-
cpe:2.3:a:mongodb:c++_driver:4.3.0
-
cpe:2.3:a:mongodb:c++_driver:4.3.1
-
cpe:2.3:a:mongodb:c++_driver:4.4.0
-
cpe:2.3:a:mongodb:c++_driver:4.4.1
-
cpe:2.3:a:mongodb:c++_driver:4.5.0
-
cpe:2.3:a:mongodb:c++_driver:4.5.1