Login Request a demo
LI
Product
Libmongocrypt
by Mongodb · last CVE Oct 8, 2026
4
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 1Medium 3Low 0
Severity
All severities4Critical0High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Libmongocrypt to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-84971
6.5
0%
Sep 3
Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path
Affected: 1.7.0 before 1.20.4
CVE-2026-81523
4.4
0%
Aug 27
Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt
Affected: before 1.20.3
CVE-2026-84962
4.2
0%
Sep 3
Authenticated KMS request forgery via CRLF injection in GCP key identifier strings
Affected: before 1.20.2
Showing 3