DeutschShown in its original language — a full translation is planned for a future version.
MongoDB: Mehrere Schwachstellen
view advisory published 2026-09-03
Ein Angreifer kann mehrere Schwachstellen in verschiedenen MongoDB Treibern und einer Bibliothek ausnutzen, um Daten zu manipulieren oder offenzulegen, sowie um einen Denial of Service Zustand herbeizuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-84971US | — | — | ||
Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a failed internal check that terminates the process using the lib… | ||||
| CVE-2026-84970US | medium5.8 | — | ||
A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding application hands to t… | ||||
| CVE-2026-84969US | low3.7 | — | ||
A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encode… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Advisory Database vom 2026-09-03external
- GitHub Advisory Database vom 2026-09-03external
- GitHub Advisory Database vom 2026-09-03external
- GitHub Advisory Database vom 2026-09-03external
- GitHub Advisory Database vom 2026-09-03external
- WID-SEC-W-2026-3182 - CSAF Versionself
- WID-SEC-2026-3182 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan