MongoDB PHP Driver any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

8CVEs

Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver

Published 2026-08-27 · Analyzed

8.6EPSS 0.005

Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver

Published 2026-10-08 · Analyzed

8.2EPSS 0.002

Accessing Untrusted Directory May Allow Local Privilege Escalation

Published 2024-08-07 · Analyzed

7.8EPSS 0.003

Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application

Published 2023-08-29 · Modified

7.5EPSS 0.006

PHP Stack Exhaustion

Published 2026-05-14 · Analyzed

7.5EPSS 0.004

Bulk write with options may read invalid memory

Published 2025-11-18 · Modified

6.9EPSS 0.002

Heap out-of-bounds read via corrupt nested BSON in field path error message

Published 2026-09-03 · Analyzed

6.9EPSS 0.002

Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver

Published 2026-10-08 · Analyzed

6.5EPSS 0.003