Vulnerability intelligence

CVE-2026-19001

MongoDB BI Connector ODBC Driver CWE-190

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to abnormal termination and, under certain conditions, the potential for arbitrary code execution.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

0.5%

Riskier than 43% of all CVEs · checked 2026-10-02

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories