CVE-2026-6691 in C Driver
Zusammenfassung
von MITRE • 06.05.2026
The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.