CVE-2026-114646 NoSQL command injection via mismatched raw BSON length prefix written verbatim to the wire

A data-validation flaw exists in the BSON handling and binary serialization path of the MongoDB C Driver. When an application constructs a raw or lazy BSON document object from externally supplied binary data, the driver does not verify that the size quantity declared inside that data matches the...

CVE-2026-114646

A data-validation flaw in the MongoDB C# Driver affects the BSON handling and binary serialization path. When an application constructs a raw or lazy BSON document from externally supplied binary data, the driver fails to verify if the declared size quantity matches the actual data provided. This...