CVE-2026-92756EPSS p0.0%

CVE-2026-92756CVE-2026-92756

mongodb / entity_framework_core_provider

Description

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database.

Scoring

CVSS 5.5 ()
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS0.07% probability of exploitation · percentile 0.0% · 2026-09-29T12:00:22Z
Last modified2026-09-24
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.