5.9Medium
CVE-2026-6811PHP Stack Exhaustion
Description
Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSON documents in unusual circumstances when the source of these BSON documents is not MongoDB Server.
Weakness (CWE):
CWE-674
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| MongoDB Inc. | PHP Driver | 1.21.5, 2.1.8 |
References and patches
- https://jira.mongodb.org/browse/PHPC-2636 Vendor Advisory
CPE matches (NVD) (2)
cpe:2.3:a:mongodb:php_driver:*:*:*:*:*:mongodb:*:*≥ 1.21.0 < 1.21.5cpe:2.3:a:mongodb:php_driver:*:*:*:*:*:mongodb:*:*≥ 2.1.0 < 2.1.8