CVE-2026-114654

A numeric-type conversion flaw in the BSON handling library of the MongoDB C# Driver allows an out-of-range binary subtype value supplied through untrusted textual input to bypass the library's binary-element integrity checks. When such a value is later encoded, it is narrowed to a smaller wire representation, producing binary elements that misdeclare their type or length. An unauthenticated party able to supply text parsed by an affected application can cause it to emit and persist malformed binary data, which subsequent readers either reject with an error or silently interpret as shorter than the data that was validated.

• CWE-681

• https://github.com/mongodb/mongo-csharp-driver/releases/tag/v3.13.0
• https://github.com/mongodb/mongo-csharp-driver/security/advisories/GHSA-5h2q-6c9r-7x25
• https://jira.mongodb.org/browse/CSHARP-6166

Published

Oct 22, 2026

Last Modified

Oct 22, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-114649The MongoDB C# Driver compares TLS client certificates by is…6.8
• CVE-2026-11465A security flaw has been discovered in songquanpeng one-api …3.1
• CVE-2026-114650A flaw in the client-side encryption support of the MongoDB …5.9
• CVE-2026-114651A memory-handling weakness in the BSON deserialization compo…4
• CVE-2026-114652A data-query-logic neutralization weakness in the update-sta…6.5
• CVE-2026-114653A client-side encryption schema construction component in th…6.5
• CVE-2026-114655libmongocrypt builds requests to external key management ser…5.9
• CVE-2026-114656Traefik before 2.11.58 and 3.7.13 contains an authentication…7.5
• CVE-2026-114657Grav from 2.0.0 before 2.2.5 contains an information disclos…5.7
• CVE-2026-114658Grav Login plugin from 3.6.0 before 3.9.13 contains a missin…8.8
• CVE-2026-114659Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an aut…6.5
• CVE-2026-11466A weakness has been identified in zilliztech deep-searcher u…5.4