Bi Connector (Mongodb) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 57 known versions, newest CVE from 2026-08-28. Vendor: Mongodb.

CVEs of Bi Connector

• CVE-2026-81520 - CVSS 8.7 (high), 2026-08-28: A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session open indefinitely by beginning a…
• CVE-2026-81518 - CVSS 8.7 (high), 2026-08-28: When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not…
• CVE-2026-81517 - CVSS 8.7 (high), 2026-08-28: An unauthenticated party able to reach the port of a MongoDB Connector for BI (mongosqld) instance may generate enough routine connection log activity to…
• CVE-2026-81490 - CVSS 8.3 (high), 2026-08-28: A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by…
• CVE-2026-77586 - CVSS 8.5 (high), 2026-08-28: In MongoDB Connector for BI, MongoDB object names such as collection, field, and index names are placed into the quoted identifiers of the DDL text returned…
• CVE-2026-77184 - CVSS 5.7 (medium), 2026-08-28: In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW…
• CVE-2026-75573 - CVSS 5.5 (medium), 2026-08-27: In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI…
• CVE-2026-75159 - CVSS 8.2 (high), 2026-08-27: An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a…