CVE-2026-76798

Name of the Vulnerable Software and Affected Versions MongoSQL Transition Readiness Tool (affected versions not specified)

Description The tool writes query text and user names extracted from BI Connector log files into generated HTML reports without proper output encoding. A user capable of issuing queries through the BI Connector can inject markup into the log content. When an operator generates and opens the report in a browser, this markup is interpreted, potentially leading to the disclosure of other users' logged query text and user names to an external party or the presentation of misleading content to the operator.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.