CVE-2026-0529

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-0529
Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers (CAPEC-100) through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol parsing is enabled.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://discuss.elastic.co/t/packetbeat-8-19-10-9-1-10-9-2-4-security-update-esa-2026-02/384520
Configurations

No configuration.

History

15 Apr 2026, 00:35

Type Values Removed Values Added
Summary
  • (es) Validación incorrecta de índice de array (CWE-129) en el analizador del protocolo MongoDB de Packetbeat puede permitir a un atacante causar desbordamientos de búfer (CAPEC-100) a través de tráfico de red especialmente diseñado. Esto requiere que un atacante envíe una carga útil malformada a una interfaz de red monitoreada donde el análisis del protocolo MongoDB está habilitado.

14 Jan 2026, 10:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-14 10:16

Updated : 2026-04-15 00:35

NVD link : CVE-2026-0529

Mitre link : CVE-2026-0529

CVE.ORG link : CVE-2026-0529

JSON object : View

Products Affected

No product.

CWE
CWE-129

Improper Validation of Array Index