CVE-2026-4359

A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver.

Score

CVSS 3.1 3.7 Low

Status

Analyzed - cna@mongodb.com

Published

2026-03-17

Last modified

2026-03-18

Weaknesses

CWE-158

Affected products

• C Driver (Mongodb)
• Mongodb C Driver (Mongodb Inc)

References

• https://jira.mongodb.org/browse/CDRIVER-6251