← Database

CVE-2026-92756

MEDIUM CVSS: 5.5 Published: 2026-09-17 Modified: 2026-09-18

Description

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database.

Affected Platforms

Unknown

Weakness Type

CWE-311

References