{"id":"CVE-2026-106428","title":"An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message","summary":"An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this m…","severity":"low","cvss":3.7,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-125"],"published":"2026-10-08","updated":"2026-10-08","sourceUpdated":"2026-10-08T20:49:23.240","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-106428","references":[{"url":"https://jira.mongodb.org/browse/CDRIVER-6370","label":"cna@mongodb.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106428.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-106428"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-106428"}],"tags":["nvd","csaf","vex","red-hat","cve.org"],"ingestedAt":"2026-10-08T20:06:22.181Z","vendor":"Red Hat","epss":0.00239,"epssPercentile":0.14857,"product":"C Driver","affected":["c_driver >= 1.1.0 < 1.30.13","c_driver >= 2.0.0 < 2.4.0"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-08T19:17:06.582493Z"},"slug":"CVE-2026-106428","body":"## Overview\n\nAn out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the application using the driver to terminate. The extra byte is not returned through the protocol.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-10-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106428.json)","depth":"sunlit","depthScore":20,"depthScoreParts":{"impact":20.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}