{
    "document": {
        "category": "csaf_security_advisory",
        "csaf_version": "2.0",
        "distribution": {
            "tlp": {
                "label": "WHITE"
            }
        },
        "lang": "nl",
        "notes": [
            {
                "category": "legal_disclaimer",
                "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
            },
            {
                "category": "description",
                "text": "MongoDB heeft meerdere kwetsbaarheden verholpen in MongoDB Server.",
                "title": "Feiten"
            },
            {
                "category": "description",
                "text": "De kwetsbaarheden betreffen verschillende onderdelen van MongoDB Server. Een kwetsbaarheid in de loggingmechanismen kan ertoe leiden dat volledige authenticatiegegevens, inclusief gevoelige credentials, zonder redactie worden vastgelegd in serverlogs tijdens SASL-authenticatiesessies. Een andere kwetsbaarheid in de BSON-validatie veroorzaakt een crash van het mongod-proces door onbeheersbare wederzijdse recursie bij de validatie van geneste binaire data, wat resulteert in een denial-of-service.",
                "title": "Interpretaties"
            },
            {
                "category": "description",
                "text": "MongoDB heeft updates uitgebracht om de kwetsbaarheden in MongoDB Server te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
                "title": "Oplossingen"
            },
            {
                "category": "general",
                "text": "medium",
                "title": "Kans"
            },
            {
                "category": "general",
                "text": "high",
                "title": "Schade"
            },
            {
                "category": "general",
                "text": "Cleartext Transmission of Sensitive Information",
                "title": "CWE-319"
            },
            {
                "category": "general",
                "text": "Use of Uninitialized Variable",
                "title": "CWE-457"
            },
            {
                "category": "general",
                "text": "NULL Pointer Dereference",
                "title": "CWE-476"
            },
            {
                "category": "general",
                "text": "Insertion of Sensitive Information into Log File",
                "title": "CWE-532"
            },
            {
                "category": "general",
                "text": "Reachable Assertion",
                "title": "CWE-617"
            },
            {
                "category": "general",
                "text": "Uncontrolled Recursion",
                "title": "CWE-674"
            },
            {
                "category": "general",
                "text": "Out-of-bounds Write",
                "title": "CWE-787"
            },
            {
                "category": "general",
                "text": "Improper Validation of Specified Type of Input",
                "title": "CWE-1287"
            }
        ],
        "publisher": {
            "category": "coordinator",
            "contact_details": "cert@ncsc.nl",
            "name": "Nationaal Cyber Security Centrum",
            "namespace": "https://www.ncsc.nl/"
        },
        "references": [
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://jira.mongodb.org/browse/SERVER-122207"
            },
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://jira.mongodb.org/browse/SERVER-123370"
            },
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://jira.mongodb.org/browse/SERVER-123440"
            },
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://jira.mongodb.org/browse/SERVER-123507"
            },
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://jira.mongodb.org/browse/SERVER-123633"
            },
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://jira.mongodb.org/browse/SERVER-123688"
            },
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://jira.mongodb.org/browse/SERVER-123918"
            },
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://jira.mongodb.org/browse/SERVER-123951"
            },
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://jira.mongodb.org/browse/SERVER-124031"
            },
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://jira.mongodb.org/browse/SERVER-124183"
            },
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://jira.mongodb.org/browse/SERVER-124190"
            },
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://jira.mongodb.org/browse/SERVER-124959"
            },
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://jira.mongodb.org/browse/SERVER-125063"
            },
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://jira.mongodb.org/browse/SERVER-126506"
            }
        ],
        "title": "Kwetsbaarheden verholpen in MongoDB Server",
        "tracking": {
            "current_release_date": "2026-06-23T09:52:48.437837Z",
            "generator": {
                "date": "2025-08-04T16:30:00Z",
                "engine": {
                    "name": "V.A.",
                    "version": "1.3"
                }
            },
            "id": "NCSC-2026-0209",
            "initial_release_date": "2026-06-23T09:52:48.437837Z",
            "revision_history": [
                {
                    "date": "2026-06-23T09:52:48.437837Z",
                    "number": "1.0.0",
                    "summary": "Initiele versie"
                }
            ],
            "status": "final",
            "version": "1.0.0"
        }
    },
    "product_tree": {
        "branches": [
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/*",
                                "product": {
                                    "name": "vers:unknown/*",
                                    "product_id": "CSAFPID-1"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "MongoDB"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/*",
                                "product": {
                                    "name": "vers:unknown/*",
                                    "product_id": "CSAFPID-2"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "MongoDB Server"
                    }
                ],
                "category": "vendor",
                "name": "MongoDB"
            }
        ]
    },
    "vulnerabilities": [
        {
            "cve": "CVE-2026-9735",
            "cwe": {
                "id": "CWE-532",
                "name": "Insertion of Sensitive Information into Log File"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Insertion of Sensitive Information into Log File",
                    "title": "CWE-532"
                },
                {
                    "category": "description",
                    "text": "MongoDB server may log full authentication credentials in server logs during SASL authentication when connection health metric logging is enabled, without redaction.",
                    "title": "Summary"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2026-9735 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9735.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                        "baseScore": 5.5,
                        "baseSeverity": "MEDIUM"
                    },
                    "products": [
                        "CSAFPID-1",
                        "CSAFPID-2"
                    ]
                }
            ],
            "title": "CVE-2026-9735"
        },
        {
            "cve": "CVE-2026-9740",
            "cwe": {
                "id": "CWE-674",
                "name": "Uncontrolled Recursion"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Uncontrolled Recursion",
                    "title": "CWE-674"
                },
                {
                    "category": "description",
                    "text": "A vulnerability in MongoDB Server's BSON validation allows unauthenticated users to crash the mongod process by exploiting uncontrolled mutual recursion in nested binary data validation.",
                    "title": "Summary"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2026-9740 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9740.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                        "baseScore": 7.5,
                        "baseSeverity": "HIGH"
                    },
                    "products": [
                        "CSAFPID-1",
                        "CSAFPID-2"
                    ]
                }
            ],
            "title": "CVE-2026-9740"
        },
        {
            "cve": "CVE-2026-9741",
            "cwe": {
                "id": "CWE-319",
                "name": "Cleartext Transmission of Sensitive Information"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Cleartext Transmission of Sensitive Information",
                    "title": "CWE-319"
                },
                {
                    "category": "description",
                    "text": "A bug in the $vectorSearch aggregation stage causes literal values for encrypted fields in filter expressions to be transmitted as plaintext rather than ciphertext, compromising encryption in Queryable Encryption and Client-Side Field Level Encryption.",
                    "title": "Summary"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2026-9741 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9741.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                        "baseScore": 6.5,
                        "baseSeverity": "MEDIUM"
                    },
                    "products": [
                        "CSAFPID-1",
                        "CSAFPID-2"
                    ]
                }
            ],
            "title": "CVE-2026-9741"
        },
        {
            "cve": "CVE-2026-9742",
            "cwe": {
                "id": "CWE-1287",
                "name": "Improper Validation of Specified Type of Input"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Improper Validation of Specified Type of Input",
                    "title": "CWE-1287"
                },
                {
                    "category": "description",
                    "text": "Enabling OIDC authentication permits unauthenticated clients to use the authenticate command with specific 'mechanism' parameters, which can trigger a server crash and cause a pre-authentication denial-of-service vulnerability.",
                    "title": "Summary"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2026-9742 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9742.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                        "baseScore": 7.5,
                        "baseSeverity": "HIGH"
                    },
                    "products": [
                        "CSAFPID-1",
                        "CSAFPID-2"
                    ]
                }
            ],
            "title": "CVE-2026-9742"
        },
        {
            "cve": "CVE-2026-9743",
            "cwe": {
                "id": "CWE-476",
                "name": "NULL Pointer Dereference"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "NULL Pointer Dereference",
                    "title": "CWE-476"
                },
                {
                    "category": "description",
                    "text": "MongoDB Server 8.0 contains a vulnerability in its aggregation pipeline where a null _subPipeline field can cause a crash and denial of service when an authenticated user issues a getMore command on the same cursor with a specially crafted aggregation.",
                    "title": "Summary"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2026-9743 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9743.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                        "baseScore": 6.5,
                        "baseSeverity": "MEDIUM"
                    },
                    "products": [
                        "CSAFPID-1",
                        "CSAFPID-2"
                    ]
                }
            ],
            "title": "CVE-2026-9743"
        },
        {
            "cve": "CVE-2026-9746",
            "cwe": {
                "id": "CWE-617",
                "name": "Reachable Assertion"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Reachable Assertion",
                    "title": "CWE-617"
                },
                {
                    "category": "description",
                    "text": "Using $changestreams and $_requestReshardingResumeToken with the exchange option causes a server crash due to an invariant violation, requiring only user login to execute the statement.",
                    "title": "Summary"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2026-9746 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9746.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                        "baseScore": 6.5,
                        "baseSeverity": "MEDIUM"
                    },
                    "products": [
                        "CSAFPID-1",
                        "CSAFPID-2"
                    ]
                }
            ],
            "title": "CVE-2026-9746"
        },
        {
            "cve": "CVE-2026-9747",
            "cwe": {
                "id": "CWE-617",
                "name": "Reachable Assertion"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Reachable Assertion",
                    "title": "CWE-617"
                },
                {
                    "category": "description",
                    "text": "Adding fromRouter:true and runtimeConstants.userRoles parameters can cause MongoDB server aggregations to crash, potentially impacting database stability during query execution.",
                    "title": "Summary"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2026-9747 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9747.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                        "baseScore": 6.5,
                        "baseSeverity": "MEDIUM"
                    },
                    "products": [
                        "CSAFPID-1",
                        "CSAFPID-2"
                    ]
                }
            ],
            "title": "CVE-2026-9747"
        },
        {
            "cve": "CVE-2026-9748",
            "cwe": {
                "id": "CWE-617",
                "name": "Reachable Assertion"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Reachable Assertion",
                    "title": "CWE-617"
                },
                {
                    "category": "description",
                    "text": "The $_internalConvertBucketIndexStats stage improperly used PauseExecution, intended only for $facet, causing crashes when TeeBuffer received unexpected signals during index stats conversion failures.",
                    "title": "Summary"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2026-9748 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9748.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                        "baseScore": 6.5,
                        "baseSeverity": "MEDIUM"
                    },
                    "products": [
                        "CSAFPID-1",
                        "CSAFPID-2"
                    ]
                }
            ],
            "title": "CVE-2026-9748"
        },
        {
            "cve": "CVE-2026-9749",
            "cwe": {
                "id": "CWE-617",
                "name": "Reachable Assertion"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Reachable Assertion",
                    "title": "CWE-617"
                },
                {
                    "category": "description",
                    "text": "An issue occurs in an aggregation pipeline using the internal $exchange stage with key-range partitioning and order-preserving delivery when a single key range's buffer fills, preventing the server from updating the internal high watermark as expected.",
                    "title": "Summary"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2026-9749 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9749.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                        "baseScore": 6.5,
                        "baseSeverity": "MEDIUM"
                    },
                    "products": [
                        "CSAFPID-1",
                        "CSAFPID-2"
                    ]
                }
            ],
            "title": "CVE-2026-9749"
        },
        {
            "cve": "CVE-2026-9750",
            "cwe": {
                "id": "CWE-617",
                "name": "Reachable Assertion"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Reachable Assertion",
                    "title": "CWE-617"
                },
                {
                    "category": "description",
                    "text": "An authenticated user can exploit insufficient separation between user document fields and internal metadata in MongoDB, potentially causing server crashes or incorrect query results.",
                    "title": "Summary"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2026-9750 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9750.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                        "baseScore": 6.5,
                        "baseSeverity": "MEDIUM"
                    },
                    "products": [
                        "CSAFPID-1",
                        "CSAFPID-2"
                    ]
                }
            ],
            "title": "CVE-2026-9750"
        },
        {
            "cve": "CVE-2026-9751",
            "cwe": {
                "id": "CWE-532",
                "name": "Insertion of Sensitive Information into Log File"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Insertion of Sensitive Information into Log File",
                    "title": "CWE-532"
                },
                {
                    "category": "description",
                    "text": "Setting the ldapQueryPassword parameter using the runtime setParameter command results in the new password being logged in plain text within the mongod.log file, exposing sensitive credentials.",
                    "title": "Summary"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2026-9751 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9751.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                        "baseScore": 5.5,
                        "baseSeverity": "MEDIUM"
                    },
                    "products": [
                        "CSAFPID-1",
                        "CSAFPID-2"
                    ]
                }
            ],
            "title": "CVE-2026-9751"
        },
        {
            "cve": "CVE-2026-9752",
            "cwe": {
                "id": "CWE-476",
                "name": "NULL Pointer Dereference"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "NULL Pointer Dereference",
                    "title": "CWE-476"
                },
                {
                    "category": "description",
                    "text": "An authorized user can trigger a server crash by executing a query with a 2dsphere index on a GeoJSON GeometryCollection containing a Polygon with a strict-winding CRS, due to insufficient validation causing a null-pointer dereference.",
                    "title": "Summary"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2026-9752 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9752.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                        "baseScore": 6.5,
                        "baseSeverity": "MEDIUM"
                    },
                    "products": [
                        "CSAFPID-1",
                        "CSAFPID-2"
                    ]
                }
            ],
            "title": "CVE-2026-9752"
        },
        {
            "cve": "CVE-2026-9753",
            "cwe": {
                "id": "CWE-1287",
                "name": "Improper Validation of Specified Type of Input"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Improper Validation of Specified Type of Input",
                    "title": "CWE-1287"
                },
                {
                    "category": "other",
                    "text": "Out-of-bounds Write",
                    "title": "CWE-787"
                },
                {
                    "category": "description",
                    "text": "A vulnerability in the $_internalApplyOplogUpdate aggregation pipeline stage allows any authenticated user with aggregate command access to trigger memory out-of-bounds access or server crashes via a malformed binary document diff.",
                    "title": "Summary"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2026-9753 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9753.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
                        "baseScore": 8.1,
                        "baseSeverity": "HIGH"
                    },
                    "products": [
                        "CSAFPID-1",
                        "CSAFPID-2"
                    ]
                }
            ],
            "title": "CVE-2026-9753"
        },
        {
            "cve": "CVE-2026-9754",
            "cwe": {
                "id": "CWE-457",
                "name": "Use of Uninitialized Variable"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Use of Uninitialized Variable",
                    "title": "CWE-457"
                },
                {
                    "category": "description",
                    "text": "Authenticated users with read role can exploit the filemd5 command to read limited uninitialized stack memory, potentially exposing sensitive data.",
                    "title": "Summary"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2026-9754 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9754.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                        "baseScore": 6.5,
                        "baseSeverity": "MEDIUM"
                    },
                    "products": [
                        "CSAFPID-1",
                        "CSAFPID-2"
                    ]
                }
            ],
            "title": "CVE-2026-9754"
        }
    ]
}