{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3amongodbdatabase_tools/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:mongodb:database_tools:*:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:java_driver:*:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:laravel-mongodb:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":6.8,"id":"CVE-2026-116641"},{"id":"CVE-2026-118510"},{"id":"CVE-2026-118581"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Database Tools (\u003c 100.20.0)","Java Driver (\u003c 5.14.0)","Laravel MongoDB (\u003c 5.12.0)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","database","mongodb","informational","supply-chain","php","laravel"],"_cs_type":"advisory","_cs_vendors":["MongoDB"],"content_html":"\u003cp\u003eMultiple vulnerabilities have been identified across several MongoDB components. These flaws may allow an attacker to compromise data integrity, perform SQL injection (SQLi), and bypass established security policies. The affected products include MongoDB Database Tools, Java Driver, and Laravel MongoDB. Users and administrators are advised to apply the patches provided in the referenced vendor security bulletins.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation may result in unauthorized data modification, injection of malicious SQL commands, or bypassing intended security controls within the affected MongoDB environments.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all systems running MongoDB Database Tools, MongoDB Java Driver, or the Laravel MongoDB integration.\u003c/li\u003e\n\u003cli\u003eUpgrade MongoDB Database Tools to version 100.20.0 or later.\u003c/li\u003e\n\u003cli\u003eUpgrade MongoDB Java Driver to version r5.14.0 or later.\u003c/li\u003e\n\u003cli\u003eUpgrade Laravel MongoDB to version 5.12.0 or later.\u003c/li\u003e\n\u003cli\u003eReview application logs for anomalous SQL queries or unauthorized access patterns following the upgrade.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-30T21:33:01Z","date_published":"2026-10-30T21:19:42Z","id":"https://feed.craftedsignal.io/briefs/2026-10-mongodb-vulns/","summary":"Multiple vulnerabilities in MongoDB Database Tools, Java Driver, and Laravel MongoDB may lead to data integrity compromise, SQL injection, and security policy bypass.","title":"MongoDB: Multiple vulnerabilities (CVE-2026-116641, CVE-2026-118510, CVE-2026-118581)","url":"https://feed.craftedsignal.io/briefs/2026-10-mongodb-vulns/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:mongodb:database_tools:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}