← Vulnerability feed

Vulnerability record · CVE-2026-19003 · published 12 August 2026

CVE-2026-19003: Mongodb bi connector odbc driver stack-based buffer overflow vulnerability

Mongodb · Bi Connector Odbc Driver

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, and is reached only when a user opens the setup dialog for such a data source and initiates a file or folder selection. Depending on build configuration, the result may range from abnormal process termination to, under certain conditions, execution of unintended code in the context of the user running the dialog.

8.4 CVSS 4.0 High EPSS 0.21% · top 89.7% CWE-121 · Stack-based buffer overflow
8.4CVSS 4.0 base score
0.21%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
11 Sep 2026Last modified by NVD

Description

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, and is reached only when a user opens the setup dialog for such a data source and initiates a file or folder selection. Depending on build configuration, the result may range from abnormal process termination to, under certain conditions, execution of unintended code in the context of the user running the dialog.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/mongodb/mongo-bi-connector-odbc-driver/releases/tag/v1.4.9 Vendor AdvisoryRelease Notes

Track CVE-2026-19003 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.5CVE-2026-19001Mongodb bi connector odbc driver integer overflow vulnerabilityThe MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, sche…EPSS 0.54%8.8CVE-2026-19002Mongodb bi connector odbc driver classic buffer overflow vulnerabilityA missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write …EPSS 0.40%8.8CVE-2026-19004Mongodb bi connector odbc driver heap-based buffer overflow vulnerabilityAn application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored proced…EPSS 0.50%8.7CVE-2026-81532Mongodb bi connector odbc driver stack-based buffer overflow vulnerabilityA user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor…EPSS 0.49%7.1CVE-2026-18888Mongodb bi connector odbc driver out-of-bounds write vulnerabilityThe MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buf…EPSS 0.32%6.0CVE-2026-81533Mongodb bi connector odbc driver stack-based buffer overflow vulnerabilityAn application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually lo…EPSS 0.37%8.8CVE-2026-7273Zyxel gs1900-8 firmware stack-based buffer overflow vulnerabilityA stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-base…KEVEPSS 2.5%8.1CVE-2021-27137DD-WRT UPnP M-SEARCH stack buffer overflowDD-WRT before 45724 contains an unsafe strcpy in the UPnP SSDP handling code (ssdp_msearch), reachable via an M-SEARCH request, that overflows a fixe…KEVEPSS 4.0%analysed

Source: NIST National Vulnerability Database (record CVE-2026-19003), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.