OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-106428

LOW · CVSS 3.7 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-10-08 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

An out-of-bounds read vulnerability in the MongoDB C Driver affects applications utilizing this driver, allowing for potential termination when processing malformed server-final messages. Although the severity is rated low, it could be exploited by a malicious server or network intermediary to disrupt service. Organizations using MongoDB should prioritize this issue to ensure application stability and prevent unexpected terminations.

CVE
CVE-2026-106428
Severity
LOW
CVSS
3.7
EPSS
0.24%
MongoDB

Original NVD Description

An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the application using the driver to terminate. The extra byte is not returned through the protocol.