CVE-2026-114651

A memory-handling weakness in the BSON deserialization component of the MongoDB C# Driver may cause data left over from previously processed content to be returned when specially crafted serialized input is parsed. An unauthenticated party able to supply serialized data to an application that maps certain primitive collection types can cause residual bytes from unrelated data processed earlier on the same execution thread to be surfaced as legitimate values. This can result in disclosure of a limited amount of information belonging to other requests or principals of the consuming application. No authentication or special privileges within the application are required.

CVSS v3 4.0 MEDIUM

4.0^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://github.com/mongodb/mongo-csharp-driver/releases/tag/v3.13.0
https://github.com/mongodb/mongo-csharp-driver/security/advisories/GHSA-f8xm-c88f-wq46
https://jira.mongodb.org/browse/CSHARP-6170
https://github.com/mongodb/mongo-csharp-driver/security/advisories/GHSA-f8xm-c88f-wq46

Configurations

No configuration.

History

30 Oct 2026, 20:17

Type	Values Removed	Values Added
References	~~() https://github.com/mongodb/mongo-csharp-driver/security/advisories/GHSA-f8xm-c88f-wq46 -~~	() https://github.com/mongodb/mongo-csharp-driver/security/advisories/GHSA-f8xm-c88f-wq46 -

22 Oct 2026, 21:17

Type	Values Removed	Values Added
References		() https://github.com/mongodb/mongo-csharp-driver/security/advisories/GHSA-f8xm-c88f-wq46 -

22 Oct 2026, 19:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-22 19:17

Updated : 2026-10-30 20:17

NVD link : CVE-2026-114651

Mitre link : CVE-2026-114651

CVE.ORG link : CVE-2026-114651

JSON object : View

Products Affected

No product.

CWE

CWE-908

Use of Uninitialized Resource

{"id": "CVE-2026-114651", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-114651", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-30T19:24:56.106622Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@mongodb.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.0, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.2}], "cvssMetricV40": [{"type": "Secondary", "source": "cna@mongodb.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cna@mongodb.com", "affectedData": [{"vendor": "MongoDB", "product": "C# Driver", "versions": [{"status": "affected", "version": "2.26.0", "lessThan": "3.13.0", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-10-22T19:17:39.003", "references": [{"url": "https://github.com/mongodb/mongo-csharp-driver/releases/tag/v3.13.0", "source": "cna@mongodb.com"}, {"url": "https://github.com/mongodb/mongo-csharp-driver/security/advisories/GHSA-f8xm-c88f-wq46", "source": "cna@mongodb.com"}, {"url": "https://jira.mongodb.org/browse/CSHARP-6170", "source": "cna@mongodb.com"}, {"url": "https://github.com/mongodb/mongo-csharp-driver/security/advisories/GHSA-f8xm-c88f-wq46", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cna@mongodb.com", "description": [{"lang": "en", "value": "CWE-908"}]}], "descriptions": [{"lang": "en", "value": "A memory-handling weakness in the BSON deserialization component of the MongoDB C# Driver may cause data left over from previously processed content to be returned when specially crafted serialized input is parsed. An unauthenticated party able to supply serialized data to an application that maps certain primitive collection types can cause residual bytes from unrelated data processed earlier on the same execution thread to be surfaced as legitimate values. This can result in disclosure of a limited amount of information belonging to other requests or principals of the consuming application. No authentication or special privileges within the application are required."}], "lastModified": "2026-10-30T20:17:00.907", "sourceIdentifier": "cna@mongodb.com"}