CVE-2026-92756
Combining encryption settings may disable encryption
Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database.
CVSS 4.0 · 6.8 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products