CVE-2026-6691

creationtimestamp| type| source ---|---|--- 2026-05-06 17:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml76i65dst2g 2026-05-06 18:09:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7ccpbv4m2c 2026-05-06 18:29:49+00:00| seen|...

CVE-2026-6691

The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI...

CVE-2026-6691

The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI...