Skip to content
fr Sign in
6.5 Medium

CVE-2026-0529 Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause…

Description

Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers (CAPEC-100) through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol parsing is enabled.

Affected products and versions

Product Affected versions Fixed in
Packetbeat 9.2 9.2.0 → 9.2.3 No fix stated
Packetbeat 9.0 9.0.0 → 9.1.9 No fix stated
Packetbeat 8.0 8.0.0 → 8.19.9 No fix stated
Packetbeat 7.0 7.0.0 → 7.17.29 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Packetbeat

The 8 CVEs of Packetbeat →
CVE-2026-115297 NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via specially… 6.5 Medium CVE-2026-26933 Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of… 5.7 Medium CVE-2026-26932 Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of… 5.7 Medium CVE-2025-68382 Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via… 6.5 Medium
Track this CVE