Is CVE-2026-96746 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-96746 being exploited in the wild.

How severe is CVE-2026-96746?

Medium severity, with a CVSS score of 6.5, published 24 September 2026.

Which products and versions are affected?

MongoDB C Driver before 1.30.12 and before 2.5.5.

Is there a fix for CVE-2026-96746?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-96746 attacked?

It is attacked over the network.

Am I affected by CVE-2026-96746?

Check whether you run MongoDB C Driver at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-96746: MongoDB C Driver out-of-bounds write in connection monitoring

CVE-2026-96746 · Severity: medium · CVSS 6.5 · Published 2026-09-24

The MongoDB C Driver contains a buffer overflow flaw in its connection-monitoring logic that can be triggered by an attacker who controls a network's name resolution. An unauthenticated attacker can craft malicious DNS responses to cause the driver to write data beyond allocated memory, leading to unexpected termination of applications that depend on the driver.

Technologies: MongoDB C Driver. Vendors: MongoDB.

Quick answers

Is CVE-2026-96746 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-96746 being exploited in the wild.
How severe is CVE-2026-96746?: Medium severity, with a CVSS score of 6.5, published 24 September 2026.
Which products and versions are affected?: MongoDB C Driver before 1.30.12 and before 2.5.5.
Is there a fix for CVE-2026-96746?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-96746 attacked?: It is attacked over the network.
Am I affected by CVE-2026-96746?: Check whether you run MongoDB C Driver at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An out-of-bounds write vulnerability exists in the connection-monitoring logic of the MongoDB C Driver, triggered when processing responses from hosts named in the client's connection string. The flaw can be exploited by an unauthenticated attacker who controls name resolution (via DNS spoofing or MITM attacks on unencrypted DNS), allowing heap buffer overflow that causes denial of service through application crash. Patches are available in version 1.30.12 and later, and version 2.5.5 and later.

Affected products

MongoDB C Driver before 1.30.12 and before 2.5.5

Timeline

2026-09-24: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.