{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "MongoDB ist ein Open-Source-Dokumentendatenbank.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in verschiedenen MongoDB Clients ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder Denial-of-Service-Zustände herbeizuführen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-3066 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3066.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-3066 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3066"
    }, {
      "category" : "external",
      "summary" : "MongoDB Connector for BI Release Notes vom 2026-08-27",
      "url" : "https://www.mongodb.com/docs/bi-connector/current/release-notes/"
    }, {
      "category" : "external",
      "summary" : "MongoDB Go Driver JIRA GODRIVER-4075 vom 2026-08-27",
      "url" : "https://jira.mongodb.org/browse/GODRIVER-4075"
    }, {
      "category" : "external",
      "summary" : "MongoDB C++ Driver JIRA CXX-3552 vom 2026-08-27",
      "url" : "https://jira.mongodb.org/browse/CXX-3552"
    }, {
      "category" : "external",
      "summary" : "MongoDB C++ Driver Release Notes r4.5.1 vom 2026-08-27",
      "url" : "https://github.com/mongodb/mongo-cxx-driver/releases/tag/r4.5.1"
    }, {
      "category" : "external",
      "summary" : "MongoDB libmongocrypt JIRA MONGOCRYPT-977 vom 2026-08-27",
      "url" : "https://jira.mongodb.org/browse/MONGOCRYPT-977"
    }, {
      "category" : "external",
      "summary" : "MongoDB libmongocrypt Release Notes 1.20.3 vom 2026-08-27",
      "url" : "https://github.com/mongodb/libmongocrypt/releases/tag/1.20.3"
    }, {
      "category" : "external",
      "summary" : "MongoDB C Driver JIRA CDRIVER-6424 vom 2026-08-27",
      "url" : "https://jira.mongodb.org/browse/CDRIVER-6424"
    }, {
      "category" : "external",
      "summary" : "MongoDB C Driver Release Notes 2.5.1 vom 2026-08-27",
      "url" : "https://github.com/mongodb/mongo-c-driver/releases/tag/2.5.1"
    }, {
      "category" : "external",
      "summary" : "MongoDB PHP Library JIRA PHPLIB-1927 vom 2026-08-27",
      "url" : "https://jira.mongodb.org/browse/PHPLIB-1927"
    }, {
      "category" : "external",
      "summary" : "MongoDB PHP Library Release Notes 1.21.4 vom 2026-08-27",
      "url" : "https://github.com/mongodb/mongo-php-library/releases/tag/1.21.4"
    }, {
      "category" : "external",
      "summary" : "MongoDB PHP Library Release Notes 2.4.1 vom 2026-08-27",
      "url" : "https://github.com/mongodb/mongo-php-library/releases/tag/2.4.1"
    }, {
      "category" : "external",
      "summary" : "MongoDB PHP Driver Release Notes 1.21.6 vom 2026-08-27",
      "url" : "https://github.com/mongodb/mongo-php-driver/releases/tag/1.21.6"
    }, {
      "category" : "external",
      "summary" : "MongoDB PHP Driver Release Notes 2.4.1 vom 2026-08-27",
      "url" : "https://github.com/mongodb/mongo-php-driver/releases/tag/2.4.1"
    }, {
      "category" : "external",
      "summary" : "MongoDB Rust Driver JIRA RUST-2467 vom 2026-08-27",
      "url" : "https://jira.mongodb.org/browse/RUST-2467"
    }, {
      "category" : "external",
      "summary" : "MongoDB Rust Driver Release Notes v3.8.2 vom 2026-08-27",
      "url" : "https://github.com/mongodb/mongo-rust-driver/releases/tag/v3.8.2"
    }, {
      "category" : "external",
      "summary" : "MongoDB C# Driver Release Notes 3.11.1 vom 2026-08-27",
      "url" : "https://www.nuget.org/packages/MongoDB.Driver/3.11.1"
    }, {
      "category" : "external",
      "summary" : "MongoDB C# Driver JIRA CSHARP-6156 vom 2026-08-27",
      "url" : "https://jira.mongodb.org/browse/CSHARP-6156"
    }, {
      "category" : "external",
      "summary" : "MongoDB C# Driver JIRA CSHARP-6158 vom 2026-08-27",
      "url" : "https://jira.mongodb.org/browse/CSHARP-6158"
    }, {
      "category" : "external",
      "summary" : "MongoDB C# Driver JIRA CSHARP-6171 vom 2026-08-27",
      "url" : "https://jira.mongodb.org/browse/CSHARP-6171"
    }, {
      "category" : "external",
      "summary" : "MongoDB C# Driver JIRA CSHARP-6164 vom 2026-08-27",
      "url" : "https://jira.mongodb.org/browse/CSHARP-6164"
    }, {
      "category" : "external",
      "summary" : "Fedora Security Advisory FEDORA-2026-276EF95C83 vom 2026-09-01",
      "url" : "https://bodhi.fedoraproject.org/updates/FEDORA-2026-276ef95c83"
    }, {
      "category" : "external",
      "summary" : "Fedora Security Advisory FEDORA-EPEL-2026-2210B463DC vom 2026-09-01",
      "url" : "https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-2210b463dc"
    }, {
      "category" : "external",
      "summary" : "Fedora Security Advisory FEDORA-EPEL-2026-92974D6AB3 vom 2026-09-01",
      "url" : "https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-92974d6ab3"
    }, {
      "category" : "external",
      "summary" : "Fedora Security Advisory FEDORA-EPEL-2026-EAC81454B1 vom 2026-09-01",
      "url" : "https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-eac81454b1"
    }, {
      "category" : "external",
      "summary" : "Fedora Security Advisory FEDORA-EPEL-2026-4C8991A29D vom 2026-09-01",
      "url" : "https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-4c8991a29d"
    }, {
      "category" : "external",
      "summary" : "Fedora Security Advisory FEDORA-2026-FEC1BD0E65 vom 2026-09-01",
      "url" : "https://bodhi.fedoraproject.org/updates/FEDORA-2026-fec1bd0e65"
    } ],
    "source_lang" : "en-US",
    "title" : "MongoDB Clients: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-08-31T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-09-01T08:07:43.476+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-3066",
      "initial_release_date" : "2026-08-27T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-08-27T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      }, {
        "date" : "2026-08-31T22:00:00.000+00:00",
        "number" : "2",
        "summary" : "Neue Updates von Fedora aufgenommen"
      } ],
      "status" : "final",
      "version" : "2"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "category" : "product_name",
        "name" : "Fedora Linux",
        "product" : {
          "name" : "Fedora Linux",
          "product_id" : "74178",
          "product_identification_helper" : {
            "cpe" : "cpe:/o:fedoraproject:fedora:-"
          }
        }
      } ],
      "category" : "vendor",
      "name" : "Fedora"
    }, {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "BI Connector <2.14.30",
          "product" : {
            "name" : "Open Source MongoDB BI Connector <2.14.30",
            "product_id" : "T058761"
          }
        }, {
          "category" : "product_version",
          "name" : "BI Connector 2.14.30",
          "product" : {
            "name" : "Open Source MongoDB BI Connector 2.14.30",
            "product_id" : "T058761-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mongodb:mongodb:bi_connector__2.14.30"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "GO Driver <2.8.2",
          "product" : {
            "name" : "Open Source MongoDB GO Driver <2.8.2",
            "product_id" : "T058762"
          }
        }, {
          "category" : "product_version",
          "name" : "GO Driver 2.8.2",
          "product" : {
            "name" : "Open Source MongoDB GO Driver 2.8.2",
            "product_id" : "T058762-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mongodb:mongodb:go_driver__2.8.2"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "C++ Driver <4.5.1",
          "product" : {
            "name" : "Open Source MongoDB C++ Driver <4.5.1",
            "product_id" : "T058763"
          }
        }, {
          "category" : "product_version",
          "name" : "C++ Driver 4.5.1",
          "product" : {
            "name" : "Open Source MongoDB C++ Driver 4.5.1",
            "product_id" : "T058763-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mongodb:mongodb:c_driver__4.5.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "libmongocrypt <1.20.3",
          "product" : {
            "name" : "Open Source MongoDB libmongocrypt <1.20.3",
            "product_id" : "T058764"
          }
        }, {
          "category" : "product_version",
          "name" : "libmongocrypt 1.20.3",
          "product" : {
            "name" : "Open Source MongoDB libmongocrypt 1.20.3",
            "product_id" : "T058764-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mongodb:mongodb:libmongocrypt__1.20.3"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "C Driver <2.5.1",
          "product" : {
            "name" : "Open Source MongoDB C Driver <2.5.1",
            "product_id" : "T058765"
          }
        }, {
          "category" : "product_version",
          "name" : "C Driver 2.5.1",
          "product" : {
            "name" : "Open Source MongoDB C Driver 2.5.1",
            "product_id" : "T058765-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mongodb:mongodb:c_driver__2.5.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "PHP Library <2.4.1",
          "product" : {
            "name" : "Open Source MongoDB PHP Library <2.4.1",
            "product_id" : "T058767"
          }
        }, {
          "category" : "product_version",
          "name" : "PHP Library 2.4.1",
          "product" : {
            "name" : "Open Source MongoDB PHP Library 2.4.1",
            "product_id" : "T058767-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mongodb:mongodb:php_library__2.4.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "PHP Library <1.21.4",
          "product" : {
            "name" : "Open Source MongoDB PHP Library <1.21.4",
            "product_id" : "T058768"
          }
        }, {
          "category" : "product_version",
          "name" : "PHP Library 1.21.4",
          "product" : {
            "name" : "Open Source MongoDB PHP Library 1.21.4",
            "product_id" : "T058768-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mongodb:mongodb:php_library__1.21.4"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Rust Driver <3.8.2",
          "product" : {
            "name" : "Open Source MongoDB Rust Driver <3.8.2",
            "product_id" : "T058770"
          }
        }, {
          "category" : "product_version",
          "name" : "Rust Driver 3.8.2",
          "product" : {
            "name" : "Open Source MongoDB Rust Driver 3.8.2",
            "product_id" : "T058770-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mongodb:mongodb:rust_driver__3.8.2"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "C# Driver <3.11.1",
          "product" : {
            "name" : "Open Source MongoDB C# Driver <3.11.1",
            "product_id" : "T058771"
          }
        }, {
          "category" : "product_version",
          "name" : "C# Driver 3.11.1",
          "product" : {
            "name" : "Open Source MongoDB C# Driver 3.11.1",
            "product_id" : "T058771-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mongodb:mongodb:c_driver__3.11.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "PHP Driver <1.21.6",
          "product" : {
            "name" : "Open Source MongoDB PHP Driver <1.21.6",
            "product_id" : "T058772"
          }
        }, {
          "category" : "product_version",
          "name" : "PHP Driver 1.21.6",
          "product" : {
            "name" : "Open Source MongoDB PHP Driver 1.21.6",
            "product_id" : "T058772-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mongodb:mongodb:php_driver__1.21.6"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "PHP Driver <2.4.1",
          "product" : {
            "name" : "Open Source MongoDB PHP Driver <2.4.1",
            "product_id" : "T058773"
          }
        }, {
          "category" : "product_version",
          "name" : "PHP Driver 2.4.1",
          "product" : {
            "name" : "Open Source MongoDB PHP Driver 2.4.1",
            "product_id" : "T058773-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mongodb:mongodb:php_driver__2.4.1"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "MongoDB"
      } ],
      "category" : "vendor",
      "name" : "Open Source"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-75159",
    "product_status" : {
      "known_affected" : [ "T058767", "T058768", "T058770", "74178", "T058761", "T058772", "T058771", "T058763", "T058762", "T058773", "T058765", "T058764" ]
    },
    "release_date" : "2026-08-27T22:00:00.000+00:00",
    "title" : "CVE-2026-75159"
  }, {
    "cve" : "CVE-2026-75573",
    "product_status" : {
      "known_affected" : [ "T058767", "T058768", "T058770", "74178", "T058761", "T058772", "T058771", "T058763", "T058762", "T058773", "T058765", "T058764" ]
    },
    "release_date" : "2026-08-27T22:00:00.000+00:00",
    "title" : "CVE-2026-75573"
  }, {
    "cve" : "CVE-2026-81521",
    "product_status" : {
      "known_affected" : [ "T058767", "T058768", "T058770", "74178", "T058761", "T058772", "T058771", "T058763", "T058762", "T058773", "T058765", "T058764" ]
    },
    "release_date" : "2026-08-27T22:00:00.000+00:00",
    "title" : "CVE-2026-81521"
  }, {
    "cve" : "CVE-2026-81522",
    "product_status" : {
      "known_affected" : [ "T058767", "T058768", "T058770", "74178", "T058761", "T058772", "T058771", "T058763", "T058762", "T058773", "T058765", "T058764" ]
    },
    "release_date" : "2026-08-27T22:00:00.000+00:00",
    "title" : "CVE-2026-81522"
  }, {
    "cve" : "CVE-2026-81523",
    "product_status" : {
      "known_affected" : [ "T058767", "T058768", "T058770", "74178", "T058761", "T058772", "T058771", "T058763", "T058762", "T058773", "T058765", "T058764" ]
    },
    "release_date" : "2026-08-27T22:00:00.000+00:00",
    "title" : "CVE-2026-81523"
  }, {
    "cve" : "CVE-2026-81524",
    "product_status" : {
      "known_affected" : [ "T058767", "T058768", "T058770", "74178", "T058761", "T058772", "T058771", "T058763", "T058762", "T058773", "T058765", "T058764" ]
    },
    "release_date" : "2026-08-27T22:00:00.000+00:00",
    "title" : "CVE-2026-81524"
  }, {
    "cve" : "CVE-2026-81525",
    "product_status" : {
      "known_affected" : [ "T058767", "T058768", "T058770", "74178", "T058761", "T058772", "T058771", "T058763", "T058762", "T058773", "T058765", "T058764" ]
    },
    "release_date" : "2026-08-27T22:00:00.000+00:00",
    "title" : "CVE-2026-81525"
  }, {
    "cve" : "CVE-2026-81526",
    "product_status" : {
      "known_affected" : [ "T058767", "T058768", "T058770", "74178", "T058761", "T058772", "T058771", "T058763", "T058762", "T058773", "T058765", "T058764" ]
    },
    "release_date" : "2026-08-27T22:00:00.000+00:00",
    "title" : "CVE-2026-81526"
  }, {
    "cve" : "CVE-2026-81527",
    "product_status" : {
      "known_affected" : [ "T058767", "T058768", "T058770", "74178", "T058761", "T058772", "T058771", "T058763", "T058762", "T058773", "T058765", "T058764" ]
    },
    "release_date" : "2026-08-27T22:00:00.000+00:00",
    "title" : "CVE-2026-81527"
  }, {
    "cve" : "CVE-2026-81528",
    "product_status" : {
      "known_affected" : [ "T058767", "T058768", "T058770", "74178", "T058761", "T058772", "T058771", "T058763", "T058762", "T058773", "T058765", "T058764" ]
    },
    "release_date" : "2026-08-27T22:00:00.000+00:00",
    "title" : "CVE-2026-81528"
  }, {
    "cve" : "CVE-2026-81529",
    "product_status" : {
      "known_affected" : [ "T058767", "T058768", "T058770", "74178", "T058761", "T058772", "T058771", "T058763", "T058762", "T058773", "T058765", "T058764" ]
    },
    "release_date" : "2026-08-27T22:00:00.000+00:00",
    "title" : "CVE-2026-81529"
  }, {
    "cve" : "CVE-2026-81530",
    "product_status" : {
      "known_affected" : [ "T058767", "T058768", "T058770", "74178", "T058761", "T058772", "T058771", "T058763", "T058762", "T058773", "T058765", "T058764" ]
    },
    "release_date" : "2026-08-27T22:00:00.000+00:00",
    "title" : "CVE-2026-81530"
  } ]
}