Vulnerabilities

TI-2026-53655 CVE-2026-76798 · GHSA-5phg-fmwx-665v

MongoSQL Transition Readiness Tool Improper Output Encoding in Generated HTML Reports

LOW 30

The MongoSQL Transition Readiness Tool writes query text and user names read from BI Connector log files into its generated HTML report without encoding them for that output context.

CVSS 4.0MEDIUM 6.9 Network Low privileges User interaction EPSS 0.00291 Published 2026-08-28 Fixed in 1.1.3 CWE-79

TI-2026-53654 CVE-2026-76797 · GHSA-9hwm-625v-gg7j

MongoSQL Transition Readiness Tool Improper Neutralization of Formula Elements in Generated Reports

LOW 26

The MongoSQL Transition Readiness Tool writes database and collection names into its generated CSV reports without neutralizing leading characters that spreadsheet applications treat as formulas.

CVSS 4.0MEDIUM 5.8 Network Low privileges User interaction EPSS 0.00352 Published 2026-08-28 Fixed in 1.1.3 CWE-1236

TI-2026-53651 CVE-2026-76794 · GHSA-xpfg-hqpq-mf5g

MongoDB BI Connector Transition Readiness Report Improper HTML Encoding When Processing Database Metadata

LOW 22

MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00231 Published 2026-08-28 Fixed in 1.1.3 CWE-79

Vulnerabilities

Filters

MongoSQL Transition Readiness Tool Improper Output Encoding in Generated HTML Reports

MongoSQL Transition Readiness Tool Improper Neutralization of Formula Elements in Generated Reports

MongoDB BI Connector Transition Readiness Report Improper HTML Encoding When Processing Database Metadata