CVE-2026-114651
Tenable Plugin
Checking the public Tenable catalog…
AI Threat Summary
CVE-2026-114651 is a moderate vulnerability with a CVSS score of 4.0 affecting the target software. Authentication can be bypassed allowing unauthenticated access. Threat hunters should monitor for exploit attempts and apply vendor patches immediately.
Description
A memory-handling weakness in the BSON deserialization component of the MongoDB C# Driver may cause data left over from previously processed content to be returned when specially crafted serialized input is parsed. An unauthenticated party able to supply serialized data to an application that maps certain primitive collection types can cause residual bytes from unrelated data processed earlier on the same execution thread to be surfaced as legitimate values. This can result in disclosure of a limited amount of information belonging to other requests or principals of the consuming application. No authentication or special privileges within the application are required.
Attack Chain
Attacker identifies authentication endpoint and tests for bypass conditions
Attacker exploits CVE-2026-114651 authentication flaw to gain unauthorized access without valid credentials
Attacker enumerates accessible resources, users, and configurations
Attacker exfiltrates sensitive data accessible without proper authorization
MITRE ATT&CK Techniques
Indicators of Compromise
| Type | Value | Description | |
|---|---|---|---|
| user_agent | Mozilla/5.0 (compatible; exploit/1.0) |
Generic exploit scanner user agent pattern | |
| url | /api/vuln-endpoint?payload=<malicious> |
Exploit attempt against application endpoint — monitor access logs for anomalous params |
Remediation
Quick Facts
| CVE ID | CVE-2026-114651 |
| CVSS Score | 4.0 |
| Vector | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N |
| Published | 2026-10-22 |
| Exploited | No |
| CISA KEV | No |
| PoC | Not public |