THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-18888 (MEDIUM 6.5) — The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffe

[NVD] CVE-2026-18888 (MEDIUM 6.5) — The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffe

lownvdPublished 2026-08-12

CVE-2026-18888 CVSS: 6.5 MEDIUM Published: 2026-08-12T21:17:37.170

The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffer and corrupt adjacent memory. A user who can store

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-18888