CVE-2026-114651

Name of the Vulnerable Software and Affected Versions MongoDB C# Driver (affected versions not specified)

Description A memory-handling weakness exists in the BSON deserialization component. An unauthenticated party can provide specially crafted serialized input to an application that maps certain primitive collection types, causing residual bytes from unrelated data processed earlier on the same execution thread to be returned as legitimate values. This leads to the disclosure of a limited amount of information belonging to other requests or principals of the consuming application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.