BaseFortify

Publication date: 2026-09-17

Last updated on: 2026-09-24

Assigner: MongoDB, Inc.

Description

If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information (if in use) such as passwords and AWS secure access keys.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-17

Last Modified

2026-09-24

Generated

2026-10-10

EPSS Evaluated

2026-10-09

NVD

CVE-2026-92758

Affected Vendors & Products

Vendor	Product	Version / Range
mongodb	entity_framework_core_provider	From 10.0.0 (inc) to 10.0.4 (exc)
mongodb	entity_framework_core_provider	From 8.0.0 (inc) to 8.4.4 (exc)
mongodb	entity_framework_core_provider	From 9.0.0 (inc) to 9.1.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-532	The product writes sensitive information to a log file.

Attack-Flow Graph

AI Quick Actions have not been generated yet.

Hi! I’m here to help you understand CVE-2026-92758. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70