CVE-2026-76794
MongoDB BI Connector Transition Readiness Report Improper HTML Encoding When Processing Database Metadata
CVSS Score
4.6
EPSS Score
0.0%
EPSS Percentile
0th
MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML. A MongoDB user with write access can introduce crafted metadata that may cause script code to run when another user generates and opens the report, potentially exposing report contents or altering its display.
| CWE | CWE-79 |
| Vendor | mongodb |
| Product | bi connector transition readiness report |
| Ecosystems | |
| Industries | Technology |
| Published | Aug 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for mongodb bi connector transition readiness report
Be the first to know when new medium vulnerabilities affecting mongodb bi connector transition readiness report are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None
Affected Versions
MongoDB / BI Connector Transition Readiness Report
1.0.0 < 1.1.3