NoSQL databases
Summary: NoSQL databases store and retrieve data in formats other than traditional SQL relational tables, and are built to handle large volumes of unstructured or semi-structured data with fewer relational constraints and consistency checks than SQL. Unlike SQL, they use a wide range of query languages rather than a universal standard, which PortSwigger notes matters because detecting vulnerabilities in a NoSQL database requires understanding its model framework and language.
Why it matters: The same reduced constraint and consistency checking that makes NoSQL databases scalable and flexible also means the query language varies from one database to the next, so a security team's SQL injection playbook and tooling may not map onto what an application is actually sending to the database.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026