PT-2026-2848

CVE-2026-0529

·

Published

2026-01-14

·

Updated

2026-05-12

Description by

CVSS 3.1
6.5
Medium
MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Packetbeat (affected versions not specified)
Description A flaw exists in Packetbeat’s MongoDB protocol parser related to improper validation of array index, which could allow for buffer overflows when processing specially crafted network traffic. An attacker can trigger this issue by sending a malformed payload to a monitored network interface where MongoDB protocol parsing is enabled. This requires the attacker to send a crafted payload.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾