PT-2026-2848 · Elastic+1 · Packetbeat+1

Aisle Research · Published 2026-01-14 · Updated 2026-05-12 · CVE-2026-0529

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Packetbeat (affected versions not specified)

Description A flaw exists in Packetbeat’s MongoDB protocol parser related to improper validation of array index, which could allow for buffer overflows when processing specially crafted network traffic. An attacker can trigger this issue by sending a malformed payload to a monitored network interface where MongoDB protocol parsing is enabled. This requires the attacker to send a crafted payload.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

BDU:2026-07213

CVE-2026-0529

Affected Products

Packetbeat

Red Os

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-0529 · Security Note
• https://bdu.fstec.ru/vul/2026-07213 · Security Note
• https://discuss.elastic.co/t/packetbeat-8-19-10-9-1-10-9-2-4-security-update-esa-2026-02/384520 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-beats-cve-2026-0529-7.3 · Note
• https://redos.red-soft.ru/search/?iblock_id=24&q=CVE-2026-0529 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-beats-cve-2026-0529-8.0 · Note
• https://twitter.com/CVEnew/status/2011555232074142086 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2011467294551998696 · Twitter Post