CVE-2026-6811: PHP Stack Exhaustion
Published May 14, 2026
·Updated
Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSON documents in unusual circumstances when the source of these BSON documents is not MongoDB Server.
Affected Software
3 affected components
pecl/mongodb
MongoDB Php Driver Mongodb>=1.21.0<1.21.5
MongoDB Php Driver Mongodb>=2.1.0<2.1.8
Event History
May 14, 2026
CVE Published
via MITRE·09:27 PM
Data Sourced
via MITRE·09:27 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-6811?
CVE-2026-6811 has been rated with a moderate severity level due to its potential to crash applications.
2
How do I fix CVE-2026-6811?
To address CVE-2026-6811, ensure that you limit the depth of BSON documents being processed in your application.
3
What software is affected by CVE-2026-6811?
CVE-2026-6811 affects the pecl/mongodb driver used for PHP applications.
4
Can CVE-2026-6811 be exploited remotely?
CVE-2026-6811 is not directly exploitable remotely as it requires specially crafted BSON documents.
5
What impact does CVE-2026-6811 have on my PHP application?
The impact of CVE-2026-6811 can lead to application crashes when handling deeply nested BSON documents.