CVE-2026-92756
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Combining encryption settings may disable encryption
Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
MongoDB Entity Framework Core Provider
- Vendor
- MongoDB Inc.
- Product
- MongoDB Entity Framework Core Provider
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 8.0.0 | affected | semver | 8.4.3 | Unavailable | None listed |
| 9.0.0 | affected | semver | 9.1.3 | Unavailable | None listed |
| 10.0.0 | affected | semver | 10.0.3 | Unavailable | None listed |