[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSSdUyz0gHCitelOLjSfK0SjQ7maCS7Ubm_iRf3DmL9Q":3,"g5a-risk:CVE-2026-81521":119},{"success":4,"data":5,"meta":116},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":29,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":60,"weaknesses":61,"weaknessesCount":48,"isActivelyExploited":70,"cisaInfo":29,"otxData":29,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":107,"notableEvents":108},"CVE-2026-81521","What is CVE-2026-81521?","The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name could therefore have the write directed at a database and collection other than the ones it intended. Only the Client.BulkWrite API is affected.","The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escapi...","2026-08-27T20:18:50.35","2026-10-06T19:18:15.99",7.1,"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":34},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"cna@mongodb.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N","NETWORK","LOW","NONE","UNCHANGED","HIGH",6.5,"MEDIUM",null,2.8,3.6,[],[],[35],{"Source":17,"Type":18,"CVSSData":36},{"Version":37,"VectorString":13,"BaseScore":12,"BaseSeverity":26,"AttackVector":22,"AttackComplexity":23,"AttackRequirements":24,"PrivilegesRequired":23,"UserInteraction":24,"VulnConfidentialityImpact":24,"VulnIntegrityImpact":26,"VulnAvailabilityImpact":24,"SubConfidentialityImpact":24,"SubIntegrityImpact":24,"SubAvailabilityImpact":24,"ExploitMaturity":38,"ConfidentialityRequirement":38,"IntegrityRequirement":38,"AvailabilityRequirement":38,"ModifiedAttackVector":38,"ModifiedAttackComplexity":38,"ModifiedAttackRequirements":38,"ModifiedPrivilegesRequired":38,"ModifiedUserInteraction":38,"ModifiedVulnConfidentialityImpact":38,"ModifiedVulnIntegrityImpact":38,"ModifiedVulnAvailabilityImpact":38,"ModifiedSubConfidentialityImpact":38,"ModifiedSubIntegrityImpact":38,"ModifiedSubAvailabilityImpact":38,"Safety":38,"Automatable":38,"Recovery":38,"ValueDensity":38,"VulnerabilityResponseEffort":38,"ProviderUrgency":38},"4.0","NOT_DEFINED",0.00208,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"mongodb","go_driver","*","cpe:2.3:a:mongodb:go_driver:*:*:*:*:*:mongodb:*:*",1,[50,55],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fjira.mongodb.org\u002Fbrowse\u002FGODRIVER-4075","Mongodb",[54],"Vendor Advisory",{"url":56,"source":57,"tags":58},"https:\u002F\u002Fpkg.go.dev\u002Fgo.mongodb.org\u002Fmongo-driver\u002Fv2@v2.8.2","Go",[59],"Product",2,[62],{"id":63,"name":64,"description":65,"extendedDescription":66,"status":67,"abstraction":68,"structure":69},"CWE-99","Improper Control of Resource Identifiers ('Resource Injection')","The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control.","A resource injection issue occurs when the following two conditions are met:\nThis may enable an attacker to access or modify otherwise protected system resources.","Draft","Class","Simple",false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2026-81521? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2026-81521, a high severity cyber security vulnerability from 2026. The MongoDB Go Driver's client-level bulk write operation m...","CVE-2026-81521, CVE-2026-81521 vulnerability, CVE-2026-81521 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, mongodb security, go_driver vulnerability","\u002Fwhat-is\u002Fcve-2026-81521",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2026-81521","Cybersecurity","CVE-2026-81521, CVE-2026-81521 vulnerability, CVE-2026-81521 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":29,"Negate":29,"Nodes":99},[100],{"Operator":101,"Negate":70,"CPEMatch":102},"OR",[103],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":104,"VersionStartExcluding":29,"VersionStartIncluding":105,"VersionEndExcluding":106,"VersionEndIncluding":29},"C1792205-5004-4E16-9073-00C8E1FE7BB1","2.1.0","2.8.2",[],[109],{"id":110,"eventType":111,"eventTime":112,"details":113,"label":114,"color":115},"d40a2786-8643-4832-b486-6b6cc3662135","NEW_NVD","2026-08-28T04:01:39.699232+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":117,"version":118},1792362835272,"2.0",{"score":120,"band":121,"action":122,"scoredAt":123},23,"Low","Monitor","2026-10-16T07:16:46.512766+00:00"]