CVE-2026-6811

PHP Stack Exhaustion

CVSS 6 MEDIUMEPSS 0.3%CWE-674

Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSON documents in unusual circumstances when the source of these BSON documents is not MongoDB Server.

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Produtos afetados

MongoDB Inc. · PHP Driver

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://jira.mongodb.org/browse/PHPC-2636