Threats Tagged 'cve-2026-77586'
View all threats tagged with 'cve-2026-77586'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-77586'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-77586 is a high-severity SQL injection vulnerability in MongoDB Connector for BI. It arises because MongoDB object names are inserted into SQL DDL statements without properly escaping identifier delimiters. A user with write permissions to a sampled MongoDB collection can craft object names that inject additional SQL code. If this generated SQL is replayed against a SQL server, the injected code executes with that session's privileges. Join the discussion | GCVE Database | 08/28/2026, 19:26:11 UTC Added: 08/29/2026, 15:17:01 UTC |
0 CVE-2026-77586 is a high-severity SQL injection vulnerability in the MongoDB Connector for BI version 2.1.0. It occurs because MongoDB object names are inserted into quoted identifiers in DDL statements without properly escaping the identifier delimiter. This allows a user with write permissions on a sampled MongoDB collection to craft object names that inject additional SQL commands. If these generated statements are replayed against a SQL server, the injected SQL executes with the privileges of that session. Join the discussion | CVE Database V5 | 08/28/2026, 19:26:11 UTC Added: 08/28/2026, 19:40:02 UTC |
Showing 1 to 2 of 2 results