Medium severity5.5NVD Advisory· Published Sep 17, 2026· Updated Sep 24, 2026
CVE-2026-92756
CVE-2026-92756
Description
Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- cpe:2.3:a:mongodb:entity_framework_core_provider:*:*:*:*:*:.net:*:*range: >=8.0.0,<8.4.3
Patches
Vulnerability mechanics
References
1- jira.mongodb.org/browse/EF-388nvdVendor AdvisoryPermissions Required
News mentions
0No linked articles in our index yet.