Medium severity6.5NVD Advisory· Published Sep 10, 2026· Updated Sep 29, 2026
CVE-2026-88026
CVE-2026-88026
Description
Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C# Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected application. An authenticated user who can influence such a value may cause the application to return records beyond those intended by the original filter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
1- jira.mongodb.org/browse/CSHARP-6177nvdVendor Advisory
News mentions
1- MongoDB: 14 Vulnerabilities Disclosed, GridFS & Server Impacted in 24h WindowVypr Intelligence · Sep 11, 2026