CVE-2026-6231mediumCWE-20

CVE-2026-6231: fallo de gravedad media en MongoDB Inc. C Driver

bson_validate may skip validation when processing certain inputs

Publicada el

Seguir esta CVE+ Monitorear C Driver+ Monitorear mongo-c-driver

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.2%
The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing malformed or invalid UTF-8 sequences to bypass validation and be processed incorrectly. The issue may affect applications that rely on these functions to validate untrusted BSON data before further processing. This issue affects MongoDB C Driver versions prior to 1.30.5, MongoDB C Driver version 2.0.0 and MongoDB C Driver version 2.0.1
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Productos afectados
MongoDB Inc. · C Driver
CVEs relacionadas — MongoDB Inc. C Driver

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-93393CRITICALHeap overflow via oversized decrypted TLS record sequence in Windows Secure Channel streamEPSS 0.5%CVE-2026-93395MEDIUMInteger Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer()EPSS 0.4%CVE-2026-93394MEDIUMlibmongoc SCRAM client nonce-validation bypassEPSS 0.3%