CVE-2026-9751

CVSS Score & Metrics

Base Score

5.5 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N                                    

The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.

Published Date

June 09, 2026

Last Modified

June 12, 2026

CWE ID

CWE-532

Source

NVD

Vendor

mongodb

Product

mongodb