Threats Tagged 'cve-2026-77184'
View all threats tagged with 'cve-2026-77184'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-77184'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-77184 is a medium severity SQL injection vulnerability in MongoDB BI Connector version 2.1.0. It arises because the description text of a collection's JSON schema validator is included in the SQL DDL comments without properly escaping backslash characters. This allows a user with permission to modify the schema validator to embed additional SQL commands in the generated output. If this output is later executed against a SQL server, the injected SQL commands run with the privileges of that session. Join the discussion | GCVE Database | 08/28/2026, 19:25:23 UTC Added: 08/29/2026, 15:17:03 UTC |
0 CVE-2026-77184 is a medium severity SQL injection vulnerability in MongoDB Connector for BI version 2.1.0. It arises because the description text of a collection's JSON schema validator is included in the comment text of DDL statements generated by SHOW CREATE without properly escaping backslash characters. A user with permission to modify the schema validator can embed additional SQL code in this output. If this generated SQL statement is later executed against a SQL server, the injected SQL runs with the privileges of that session. Join the discussion | CVE Database V5 | 08/28/2026, 19:25:23 UTC Added: 08/28/2026, 19:40:02 UTC |
Showing 1 to 2 of 2 results