Which versions of Mongodb C Driver are affected by EUVD-2026-12640?

CVE-2026-4359 is a low-severity vulnerability (CVSS 2.0). The limited severity suggests constrained impact, typically requiring specific conditions or local access for exploitation.. A patch is available.

How to fix or mitigate EUVD-2026-12640?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Mongodb C Driver EUVD-2026-12640

Q: What is the CVSS score of EUVD-2026-12640?

EUVD-2026-12640 has a CVSS 4.0 base score of 2.0 (Low). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-4359 LOW

Improper Neutralization of Null Byte or NUL Character (CWE-158)

2026-03-17 mongodb

Denial Of Service Mongodb C Driver

2.0

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.0 LOW

CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

Scope

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 17, 2026 - 20:30 euvd

EUVD-2026-12640

CVE Published

Mar 17, 2026 - 19:42 nvd

LOW 2.0

DescriptionCVE.org

A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver.

Analysis

A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver.

More in Mongodb C Driver

View all

CVE-2026-6691 HIGH This Week

8.6 May 06

Heap buffer overflow in MongoDB C Driver's Cyrus SASL integration allows local attackers to achieve code execution befor

Same weakness CWE-158 – Improper Neutralization of Null Byte or NUL Character

View all

CVE-2025-47812 CRITICAL POC

10.0

CVE-2025-66263 HIGH POC

8.9

CVE-2023-5719 CRITICAL

9.8

CVE-2020-14500 CRITICAL

9.8

8.6

8.1

7.3

6.7

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

Vendor StatusVendor

Debian

mongo-c-driver

Release	Status	Fixed Version	Urgency
bullseye	vulnerable	1.17.6-1	-
bullseye (security)	vulnerable	1.17.6-1+deb11u2	-
bookworm	vulnerable	1.23.1-1+deb12u2	-
trixie	vulnerable	1.30.4-1+deb13u1	-
forky, sid	fixed	2.2.3-1	-
(unstable)	fixed	2.2.3-1	-

EUVD-2026-12640 vulnerability details – vuln.today

Back

Mongodb C Driver EUVD-2026-12640

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

More in Mongodb C Driver

Same weakness CWE-158 – Improper Neutralization of Null Byte or NUL Character

Same technique Denial Of Service

Vendor StatusVendor

Debian

Share

External POC / Exploit Code