CVE-2026-96746

Katalog CVE

CVSS 6.5 · Medium EPSS 0,37%

Kerentanan Out-of-bounds Write. Skor CVSS 3.1 6.5 (Medium) menurut mongodb.com.

Deskripsi (NVD)

An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the driver to terminate unexpectedly.

Rincian

Terbit di NVD

24 September 2026

Terakhir diubah

24 September 2026

Status NVD

Awaiting Analysis

CVSS 3.1

6.5 (Medium), sumber mongodb.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 28,5% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/mongodb/mongo-c-driver/releases/tag/1.30.12
• https://github.com/mongodb/mongo-c-driver/releases/tag/2.5.5
• https://github.com/mongodb/mongo-c-driver/security/advisories/GHSA-frjf-h5jg-4v46