CVE-2026-106432 | MongoDB PHP Driver up to 1.21.10/2.1.10/2.5.3 BSON encoder heap-based overflow

SecurityVulns
Yanac

A vulnerability identified as very critical has been detected in MongoDB PHP Driver up to 1.21.10/2.1.10/2.5.3. Affected is an unknown function of the component BSON encoder. Performing a manipulation results in heap-based buffer overflow.

This vulnerability is reported as CVE-2026-106432. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More