CVE-2026-6811
- Source
- https://cve.org/CVERecord?id=CVE-2026-6811
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-6811.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-6811
- Downstream
- Published
- 2026-05-14T21:27:03Z
- Modified
- 2026-09-26T03:47:12Z
- Severity
-
- 6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- PHP Stack Exhaustion
- Details
-
Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSON documents in unusual circumstances when the source of these BSON documents is not MongoDB Server.
- Database specific
{ "cna_assigner": "mongodb", "cwe_ids": [ "CWE-674" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/6xxx/CVE-2026-6811.json", "unresolved_ranges": [ { "extracted_events": [ { "introduced": "1.21.5" }, { "last_affected": "1.21.5" }, { "introduced": "2.1.8" }, { "last_affected": "2.1.8" } ], "source": "AFFECTED_FIELD" } ] }- References
Affected packages
Git / github.com/mongodb/mongo-php-driver
Affected ranges
- Type
- GIT
- Repo
- https://github.com/mongodb/mongo-php-driver
- Events
- Database specific
-
Show details
{ "cpe": "cpe:2.3:a:mongodb:php_driver:*:*:*:*:*:mongodb:*:*", "extracted_events": [ { "introduced": "1.21.0" }, { "fixed": "1.21.5" }, { "introduced": "2.1.0" }, { "fixed": "2.1.8" } ], "source": "CPE_RANGE" }