Description
Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers (CAPEC-100) through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol parsing is enabled.
Scores
CVSS v3
6.5
EPSS
0.0004
EPSS Percentile
12.0%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-129
Status
published
Products (4)
Elastic/Packetbeat
7.0.0 - 7.17.29
Elastic/Packetbeat
8.0.0 - 8.19.9
Elastic/Packetbeat
9.0.0 - 9.1.9
Elastic/Packetbeat
9.2.0 - 9.2.3
Published
Jan 14, 2026
Tracked Since
Feb 18, 2026