https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-88026.htmlhttps://patchthecve.com/cve/CVE-2026-88026.htmlTue, 29 Sep 2026 16:17:10 +0000MEDIUM 6.5: Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C# Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected application. An authenticated user who can influence such a vahttps://patchthecve.com/cve/CVE-2026-88025.htmlhttps://patchthecve.com/cve/CVE-2026-88025.htmlTue, 29 Sep 2026 16:19:20 +0000HIGH 8.3: Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C# Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier phttps://patchthecve.com/cve/CVE-2026-81530.htmlhttps://patchthecve.com/cve/CVE-2026-81530.htmlTue, 29 Sep 2026 19:16:13 +0000MEDIUM 5.6: A weakness in the client-side encryption configuration surface of the MongoDB C# Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked ahttps://patchthecve.com/cve/CVE-2026-81529.htmlhttps://patchthecve.com/cve/CVE-2026-81529.htmlTue, 29 Sep 2026 19:16:22 +0000HIGH 7.1: Improper neutralization of delimiters in connection-URL construction allows connection-option injection in the MongoDB C# Driver. When an application passes untrusted text into the driver's connection-URL builder and round-trips the builder back into a client configuration, the untrusted text is serhttps://patchthecve.com/cve/CVE-2026-81528.htmlhttps://patchthecve.com/cve/CVE-2026-81528.htmlTue, 29 Sep 2026 19:16:27 +0000MEDIUM 5.4: A MongoDB C# driver document-replacement code path omits the element-name/shape validation that the equivalent write paths apply, so a value supplied as a replacement is forwarded to the server without neutralization of query-language special elements. An application that passes untrusted, loosely-thttps://patchthecve.com/cve/CVE-2026-81527.htmlhttps://patchthecve.com/cve/CVE-2026-81527.htmlTue, 29 Sep 2026 19:16:34 +0000MEDIUM 6.5: A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C# Driver, in both aggregation expression and query filter translation. When application-supplied values are embedded in certain query constructs, special elements contained within those va