{
  "cveId": "CVE-2026-6811",
  "url": "https://patchblox.com/security/cve/CVE-2026-6811",
  "summary": "CVE-2026-6811 is fixed in php-mongodb on 1 platform, first by DEBIAN-CVE-2026-6811, released May 14, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "php-mongodb: Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested...",
  "description": "Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSON documents in unusual circumstances when the source of these BSON documents is not MongoDB Server.",
  "published": "2026-05-14T22:16:45Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00367,
  "epssPercentile": 0.30747,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "php-mongodb",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2.0.0-1\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2026-6811",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-6811",
      "released": "2026-05-14T22:16:45Z"
    },
    {
      "platform": "linux",
      "product": "php-mongodb",
      "release": "Debian 14",
      "fixedVersion": "2.5.3-1",
      "fix": "DEBIAN-CVE-2026-6811",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-6811",
      "released": "2026-05-14T22:16:45Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}