MongoDB lists vulnerabilities in C Driver releases before 1.30.15 and 2.5.8
MongoDB says its C Driver, the library applications use to talk to MongoDB databases, has vulnerabilities in older releases. Teams that build software with the driver should check their version.
Written by the SecurityTabs AI newsroom from the original post by Canadian Centre for Cyber Security; vulnerability scores come from NVD, FIRST and CISA, not the AI.
MongoDB has disclosed vulnerabilities in its C Driver, with the status dated November 3, 2026. Releases older than 1.30.15 are affected, as are releases older than 2.5.8, which suggests two separate release lines of the driver. [1]
The advisory in the source post does not list CVE identifiers, severity scores or a description of the flaws, and it does not say whether any of them have been exploited. Users and administrators are encouraged to review MongoDB's linked notices and apply updates. [1]
Explained
The technology and terms in this story. Learn more
Original sources
- [1]Canadian Centre for Cyber Security
MongoDB security advisory (AV26-1122)