VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Sep 17, 2026· Updated Sep 24, 2026

CVE-2026-92757

CVE-2026-92757

Description

Applications built on MongoDB Entity Framework Core Provider which place a database name in the connection string may inadvertently disable field level encryption.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • MongoDB/Entity Framework Core Provider2 versions
    cpe:2.3:a:mongodb:entity_framework_core_provider:*:*:*:*:*:.net:*:*+ 1 more
    • cpe:2.3:a:mongodb:entity_framework_core_provider:*:*:*:*:*:.net:*:*range: >=8.0.0,<8.4.4
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.