Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
MongoDb Insertion of Sensitive Information into Log File Vulnerability - CVE-2026-9751 - Vulnerability Database
MongoDb

MongoDb Insertion of Sensitive Information into Log File Vulnerability - CVE-2026-9751

Medium
Reference: CVE-2026-9751
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-9751
Title: MongoDb Insertion of Sensitive Information into Log File Vulnerability
Overview:

The ldapQueryPassword parameter when set through the runtime setParameter command will log the new password to the mongod.log file in plain text.