Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message, memory adjacent to that buffer is overwritten with user-supplied content. This can terminate the hosting application process and may allow unintended code to run within it.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚠️ Vulnerabilidad en productos MongoDB ❗ CVE-2026-81532 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-mongodb-5/ https://t.co/i6opXHaatq
Post summary
A brief notice alerts to a MongoDB vulnerability (CVE‑2026‑81532) and points to external links for more information, but no technical facts, exploit details, or mitigation steps are included.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mongodb | bi_connector_odbc_driver | - | - | - |