Skip to content
OpenAdvisories
Medium WID-SEC-2026-3209 7 CVEs

MongoDB: Mehrere Schwachstellen

Published Sep 6, 2026 · Updated Oct 4, 2026 · Revision 3 · de-DE

Vendor: Debian Vendor: Fedora Product: Linux Product: Linux Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um einen Denial of Service zu verursachen, Daten zu manipulieren, Informationen offenzulegen oder beliebige Befehle über die MongoDB-Erweiterung für Visual Studio Code auszuführen.

Product

MongoDB ist ein Open-Source-Dokumentendatenbank.

Vulnerabilities 7

  • Medium 5.9
    CVE-2026-84964

    Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client

    A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be r…

    MongoDB C Driver mongo-c-driver mongo-c-driver Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2026-84963

    Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser

    An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success …

    MongoDB C Driver mongo-c-driver mongo-c-driver Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2026-84968

    Heap out-of-bounds read via corrupt nested BSON in field path error message

    An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory copied into an error message that is returned to applicatio…

    MongoDB PHP Driver php-mongodb php-mongodb Debian Ubuntu
  • Medium 5.1
    CVE-2026-84965

    Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds

    An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated pa…

    MongoDB C Driver mongo-c-driver mongo-c-driver Debian Ubuntu Alpine
  • Medium 5.1
    CVE-2026-84966

    BSON element injection via NUL-embedded document keys in builder append

    An incorrect numeric type conversion in the BSON document building component of the MongoDB C++ Driver may cause a length value to be interpreted incorrectly. When an application supplies an extremely large, non-terminated field name to the builder, the libra…

    MongoDB C Driver mongo-cxx-driver mongo-cxx-driver Debian Ubuntu
  • Medium 4.3
    CVE-2026-84967

    Arbitrary command execution via shell-expanded connection string in Launch MongoDB Shell terminal

    A component of the MongoDB extension for Visual Studio Code does not neutralize special characters in a connection string before that value is placed into a command line the extension composes for an integrated terminal. An unauthenticated remote unauthorized…

    MongoDB MongoDB for VS Code
  • Medium 4.2
    CVE-2026-84962

    Authenticated KMS request forgery via CRLF injection in GCP key identifier strings

    An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side…

    MongoDB libmongocrypt libmongocrypt libmongocrypt Debian Ubuntu

Revision history

  1. #3

    Neue Updates von Debian aufgenommen

  2. #2

    Neue Updates von Fedora aufgenommen

  3. #1

    Initiale Fassung

References