HIGH 8.3 NVD
CVE-2026-96746
An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the respon
An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the driver to terminate unexpectedly.
References
- https://github.com/mongodb/mongo-c-driver/releases/tag/1.30.12
- https://github.com/mongodb/mongo-c-driver/releases/tag/2.5.5
This high severity vulnerability with a CVSS score of 8.3 was published on 2026-09-24 via NVD.
vulnfeed aggregates 11976 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.