CVE-2026-4359

Low · 2.0

CVSS

2.0

EPSS

0.2%

Published

Mar 17, 2026

CISA due date

—

The record

A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver.

Affected packages

Ecosystem	Package	Introduced	Fixed