PT-2026-2848
CVE-2026-0529
·
Published
2026-01-14
·
Updated
2026-05-12
Description by
CVSS 3.1
6.5
MediumMetricsAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Packetbeat (affected versions not specified)
Description
A flaw exists in Packetbeat’s MongoDB protocol parser related to improper validation of array index, which could allow for buffer overflows when processing specially crafted network traffic. An attacker can trigger this issue by sending a malformed payload to a monitored network interface where MongoDB protocol parsing is enabled. This requires the attacker to send a crafted payload.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾