MongoDB Laravel MongoDB (PHP)
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-96744 | 4.3.0 – < 5.11.0 | Unauthorized cache lock takeover via expression injection in lock owner values in MongoDB integration for Laravel | HIGH 7.1 | 0.3 % | ||
| CVE-2026-88028 | 1.2.0 – < 5.11.0 | Unauthorized document disclosure via query-operator injection in polymorphic relation identifiers in MongoDB integration for Laravel | HIGH 7.1 | 0.4 % | ||
| CVE-2026-88027 | 4.0.0 – < 5.11.0 | Mass deletion and overwrite of embedded documents via query-operator injection in embedded record keys in MongoDB integration for Laravel | HIGH 7.1 | 0.3 % | ||
| CVE-2026-88022 | 1.0.0 – < 5.11.0 | Unauthorized document disclosure and deletion via query-operator injection in explicit equality filters in MongoDB integration for Laravel | HIGH 8.4 | 0.4 % |