PT-2026-25938 · Mongodb · Mongodb C Driver

Halil Oktay · Published 2026-03-17 · Updated 2026-03-17 · CVE-2026-4359

Mitre

CVSS v3.1

2.0

2.0

Low

Base vector

AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L

A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver.

Fix

Weakness Enumeration

CWE-158

Related Identifiers

CVE-2026-4359

Affected Products

Mongodb C Driver

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-4359 · Security Note
• https://jira.mongodb.org/browse/CDRIVER-6251 · Note