Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing malformed or invalid UTF-8 sequences to bypass validation and be processed incorrectly. The issue may affect applications that rely on these functions to validate untrusted BSON data before further processing. This issue affects MongoDB C Driver versions prior to 1.30.5, MongoDB C Driver version 2.0.0 and MongoDB C Driver version 2.0.1
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-6231 BSON Validation Bypass in MongoDB C Driver Versions Prior to 1.30.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6231
Post summary
The post announces CVE-2026-6231, a BSON validation bypass affecting MongoDB C driver releases before 1.30.5, and directs readers to a Vulmon page for further information, implying an upgrade to 1.30.5 will remediate the issue.
CVE-2026-6231 The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing… https://www.cve.org/CVERecord?id=CVE-2026-6231
Post summary
The text announces CVE-2026-6231, describing a functional flaw in bson_validate that can bypass validation, without providing PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mongodb | c_driver | - | mongodb | - |