CVE-2026-6811

Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSON documents in unusual circumstances when the source of these BSON documents is not MongoDB Server.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cna@mongodb.com

Published

2026-05-14

Last modified

2026-10-26

Weaknesses

CWE-674

Affected products

• Php Driver (Mongodb)
• Php Driver (Mongodb Inc.)

References

• https://jira.mongodb.org/browse/PHPC-2636