Skip to content
Threat Feed
Subscribe

Product

PHP Driver (2.5.x < 2.5.5)

1 brief RSS
medium advisory

Denial of Service Vulnerability in MongoDB PHP Driver via Uncontrolled Recursion

An uncontrolled recursion vulnerability (CVE-2026-112368) in the MongoDB PHP driver allows an unauthenticated attacker to trigger stack exhaustion and process termination by providing malicious BSON documents.

MongoDB PHP Driver +3 vulnerability denial-of-service mongodb
1c updated