VYPR
Medium severity6.5NVD Advisory· Published Jan 14, 2026· Updated Apr 15, 2026

CVE-2026-0529

CVE-2026-0529

Description

Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers (CAPEC-100) through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol parsing is enabled.

Affected products

1
  • Elastic/Beatsinferred
    Range: <8.19.1,>=9.0.0,<9.1.1,>=9.2.0,<9.2.4

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.