CVE-2026-107324
HIGH5.9CVSS v3
—CVSS v2
0.23%
EPSS (exploit probability)
CWE-190CWE
Description
An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process, causing a denial of service. The driver's server-monitoring path contains panic recovery and is limited to server-selection failure.
CVSS v3 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected routers (0)
No routers currently mapped to this CVE in our database.