Security Feed

See the latest insights and analysis from our MDR team.
RSS for Slack
CVE-2026-96749
By Stav Salman | 
26 September 2026

CVE-2026-96749 – MongoDB Python Driver BSON encoder integer overflow enables out-of-bounds write in native extension

Integer overflow in pymongo BSON document encoding in the bundled native extension can occur when encoding a single document built from unusually large caller-supplied data. Signed 32-bit size arithmetic and an undefined-behavior overflow guard can lead to an out-of-bounds write in-process. Affected: Versions 1.9.0 to 4.18.1. Upgrade to 4.18.2 to mitigate.

Full Feed
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS