Get real-time updates on Telegram
P4
CVE-2026-114650: C# Driver 2.10.0 to before 3.13.0
CVE-2026-114650. CVSS 3.1 base score 5.9 (MEDIUM, Vendor/CNA).
Affected technology
C# Driver · 2.10.0 to before 3.13.0
MongoDB
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · No user interaction required
What an attacker can do
An application user with the ability to write data through an affected application can therefore have sensitive fields persisted in plaintext, defeating the confidentiality guarantee that client-side encryption is intended to provide. Vendor/CNA’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality impact as high; integrity and availability impact as none.
- CWE
- CWE-838
- CCR priority
- 23.6 /100 (P4)
- CVSS 3.1
- 5.9 /10 · CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N · Vendor/CNA
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-22 20:50:20.011821+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-114650.html