VULNERABILITY INTELLIGENCE

CVE-2026-19004

CVSS score8.1 HIGH
EPSS probability0.50%
CISA KEVNot currently listed
Published2026-08-12
Last modified2026-10-23
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requires connecting to an untrusted or impersonated database server that returns crafted metadata. This may result in process termination, disclosure of process memory, or, under certain conditions, arbitrary code execution.

Weakness classification

  • cna@mongodb.com: CWE-122

Primary references