MongoDB Python Driver vulnerabilities

5 CVEs affecting MongoDB Python Driver, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-106435, published 2026-10-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-88029, published 2026-09-10. High severity, CVSS 8.3. EPSS: 0.3% chance of exploitation in the next 30 days. Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a…
CVE-2026-96748, published 2026-09-24. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by…
CVE-2026-96749, published 2026-09-24. High severity, CVSS 8.4. EPSS: 0.1% chance of exploitation in the next 30 days. An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of…
CVE-2026-96747, published 2026-09-24. Medium severity, CVSS 5.0. EPSS: 0.1% chance of exploitation in the next 30 days. The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A…
CVE-2026-106435, published 2026-10-08. Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days. The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An…