- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/06/2026, Atlas SQL ODBC Driver recorded 2 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Atlas SQL ODBC Driver and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-120952MongoDB Atlas SQL ODBC Driver writes 48-byte Extended JSON into fixed 16-byte SQL_C_GUID target, causing a 32-byte out-of-bounds writeCVE-2026-19503Insufficient OIDC endpoint validation could invoke unintended local protocol handlersCVE-2025-11575MongoDB Atlas SQL ODBC driver installation via MSI may leave ACLs unset on custom installation directories| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-120952MongoDB Atlas SQL ODBC Driver writes 48-byte Extended JSON into fixed 16-byte SQL_C_GUID target, causing a 32-byte out-of-bounds write | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityMedium |
CVE-2026-19503Insufficient OIDC endpoint validation could invoke unintended local protocol handlers | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityMedium |
CVE-2025-11575MongoDB Atlas SQL ODBC driver installation via MSI may leave ACLs unset on custom installation directories | Exploitation statusNot exploited | FixYes | Published10/23/2025 | SeverityHigh |
3 Results | Page 1 of 1