CVE-2026-106430

Name of the Vulnerable Software and Affected Versions MongoDB C++ Driver (affected versions not specified)

Description The MongoDB C++ Driver discards content following an embedded NUL byte in specific field and collection names processed by the collection API. This behavior allows the driver and the calling application to interpret the same name differently. An authenticated actor capable of influencing a name passed by the application can cause it to read values from an unintended field or rename an unintended collection using the application's existing database credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.