CVE-2026-114644

Published 22 October 2026 · tracked since 23 October 2026

Description

The MongoDB C# Driver's BSON library contains an uncontrolled resource consumption weakness in its deserialization handling of one BSON value type. An application that deserializes untrusted content with the library retains data derived from that content for the lifetime of the process, with no limi

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-115356 MEDIUM 5.4
• CVE-2026-114654 MEDIUM 6.5
• CVE-2026-114645 MEDIUM 5.2
• CVE-2026-114612 CRITICAL 9.9
• CVE-2026-114613 HIGH 7.5
• CVE-2022-51026 CRITICAL 9.8
• CVE-2026-77156 MEDIUM 6.4
• CVE-2026-114609 MEDIUM 5.8
• CVE-2026-114610 MEDIUM 6.5
• CVE-2026-114611 CRITICAL 9.1

→ Open the live CVE board · all tools