CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-92756

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 0.0%

CVSS Severity

CVSS v3 Score 5.5

References

https://jira.mongodb.org/browse/EF-388

Products affected by CVE-2026-92756

Mongodb » Entity Framework Core Provider » Version: 10.0.0

cpe:2.3:a:mongodb:entity_framework_core_provider:10.0.0
Mongodb » Entity Framework Core Provider » Version: 10.0.1

cpe:2.3:a:mongodb:entity_framework_core_provider:10.0.1
Mongodb » Entity Framework Core Provider » Version: 10.0.2

cpe:2.3:a:mongodb:entity_framework_core_provider:10.0.2
Mongodb » Entity Framework Core Provider » Version: 8.0.0

cpe:2.3:a:mongodb:entity_framework_core_provider:8.0.0
Mongodb » Entity Framework Core Provider » Version: 8.0.1

cpe:2.3:a:mongodb:entity_framework_core_provider:8.0.1
Mongodb » Entity Framework Core Provider » Version: 8.0.2

cpe:2.3:a:mongodb:entity_framework_core_provider:8.0.2
Mongodb » Entity Framework Core Provider » Version: 8.0.3

cpe:2.3:a:mongodb:entity_framework_core_provider:8.0.3
Mongodb » Entity Framework Core Provider » Version: 8.1.0

cpe:2.3:a:mongodb:entity_framework_core_provider:8.1.0
Mongodb » Entity Framework Core Provider » Version: 8.1.1

cpe:2.3:a:mongodb:entity_framework_core_provider:8.1.1
Mongodb » Entity Framework Core Provider » Version: 8.2.0

cpe:2.3:a:mongodb:entity_framework_core_provider:8.2.0
Mongodb » Entity Framework Core Provider » Version: 8.2.1

cpe:2.3:a:mongodb:entity_framework_core_provider:8.2.1
Mongodb » Entity Framework Core Provider » Version: 8.2.2

cpe:2.3:a:mongodb:entity_framework_core_provider:8.2.2
Mongodb » Entity Framework Core Provider » Version: 8.2.3

cpe:2.3:a:mongodb:entity_framework_core_provider:8.2.3
Mongodb » Entity Framework Core Provider » Version: 8.3.0

cpe:2.3:a:mongodb:entity_framework_core_provider:8.3.0
Mongodb » Entity Framework Core Provider » Version: 8.3.1

cpe:2.3:a:mongodb:entity_framework_core_provider:8.3.1
Mongodb » Entity Framework Core Provider » Version: 8.3.2

cpe:2.3:a:mongodb:entity_framework_core_provider:8.3.2
Mongodb » Entity Framework Core Provider » Version: 8.3.3

cpe:2.3:a:mongodb:entity_framework_core_provider:8.3.3
Mongodb » Entity Framework Core Provider » Version: 8.3.4

cpe:2.3:a:mongodb:entity_framework_core_provider:8.3.4
Mongodb » Entity Framework Core Provider » Version: 8.4.0

cpe:2.3:a:mongodb:entity_framework_core_provider:8.4.0
Mongodb » Entity Framework Core Provider » Version: 8.4.1

cpe:2.3:a:mongodb:entity_framework_core_provider:8.4.1
Mongodb » Entity Framework Core Provider » Version: 8.4.2

cpe:2.3:a:mongodb:entity_framework_core_provider:8.4.2
Mongodb » Entity Framework Core Provider » Version: 9.0.0

cpe:2.3:a:mongodb:entity_framework_core_provider:9.0.0
Mongodb » Entity Framework Core Provider » Version: 9.0.1

cpe:2.3:a:mongodb:entity_framework_core_provider:9.0.1
Mongodb » Entity Framework Core Provider » Version: 9.0.2

cpe:2.3:a:mongodb:entity_framework_core_provider:9.0.2
Mongodb » Entity Framework Core Provider » Version: 9.0.3

cpe:2.3:a:mongodb:entity_framework_core_provider:9.0.3
Mongodb » Entity Framework Core Provider » Version: 9.0.4

cpe:2.3:a:mongodb:entity_framework_core_provider:9.0.4
Mongodb » Entity Framework Core Provider » Version: 9.1.0

cpe:2.3:a:mongodb:entity_framework_core_provider:9.1.0
Mongodb » Entity Framework Core Provider » Version: 9.1.1

cpe:2.3:a:mongodb:entity_framework_core_provider:9.1.1
Mongodb » Entity Framework Core Provider » Version: 9.1.2

cpe:2.3:a:mongodb:entity_framework_core_provider:9.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-92756

Products

Pricing

Contact Us