SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-84963

MEDIUM · CVSS 5.3 EPSS 0.19%

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The MongoDB C Driver's BSON library is vulnerable due to an incorrect numeric conversion in its JSON parsing component, which can lead to unusually large text values being silently truncated or omitted without error. This flaw allows unauthenticated attackers to manipulate input data, potentially resulting in unintended data alterations within applications that utilize this library. Organizations using MongoDB should prioritize addressing this vulnerability to safeguard data integrity and prevent unauthorized modifications.

CVE
CVE-2026-84963
Severity
MEDIUM
CVSS
5.3
EPSS
0.19%
MongoDB

Original NVD Description

An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticated party who can supply the input processed by an application that uses this component may cause that application to hold data that does not match what was submitted, which may result in unintended alteration of data.