CVE-2026-0529

MEDIUM

Packetbeat 7.0.0-7.17.28, 8.0.0-8.19.8, 9.0.0-9.1.8, 9.2.0-9.2.2 - Denial of Service via MongoDB Protocol Parser

Title source: llm

Description

Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers (CAPEC-100) through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol parsing is enabled.

References (1)

Core 1

Core References

Various Sources

https://discuss.elastic.co/t/packetbeat-8-19-10-9-1-10-9-2-4-security-update-esa-2026-02/384520

Scores

CVSS v3 6.5

EPSS 0.0020

EPSS Percentile 9.5%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-129

Status published

Products (4)

Elastic/Packetbeat 7.0.0 - 7.17.29

Elastic/Packetbeat 8.0.0 - 8.19.9

Elastic/Packetbeat 9.0.0 - 9.1.9

Elastic/Packetbeat 9.2.0 - 9.2.3

Published Jan 14, 2026

Tracked Since Feb 18, 2026