Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-81525

The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations silently directed at a different storage location than the one the application intended.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 42.1%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2026-81525


Contact Us

Shodan ® - All rights reserved