Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
MongoDb Cleartext Transmission of Sensitive Information Vulnerability - CVE-2026-9741 - Vulnerability Database
MongoDb

MongoDb Cleartext Transmission of Sensitive Information Vulnerability - CVE-2026-9741

Medium
Reference: CVE-2026-9741
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-9741
Title: MongoDb Cleartext Transmission of Sensitive Information Vulnerability
Overview:

A bug in query analysis processing of the vectorSearch aggregation stage for Queryable Encryption (QE) or Client-Side Field Level Encryption (CSFLE) results in literal values for encrypted fields within the vectorSearch stage filter expressions to be sent to the server as plaintext instead of ciphertext.