Vulnerability Details CVE-2026-81532
A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message, memory adjacent to that buffer is overwritten with user-supplied content. This can terminate the hosting application process and may allow unintended code to run within it.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 21.3%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2026-81532
-
cpe:2.3:a:mongodb:bi_connector_odbc_driver:1.0.0
-
cpe:2.3:a:mongodb:bi_connector_odbc_driver:1.1.0
-
cpe:2.3:a:mongodb:bi_connector_odbc_driver:1.2.0
-
cpe:2.3:a:mongodb:bi_connector_odbc_driver:1.3.0
-
cpe:2.3:a:mongodb:bi_connector_odbc_driver:1.4.0
-
cpe:2.3:a:mongodb:bi_connector_odbc_driver:1.4.1
-
cpe:2.3:a:mongodb:bi_connector_odbc_driver:1.4.2
-
cpe:2.3:a:mongodb:bi_connector_odbc_driver:1.4.3
-
cpe:2.3:a:mongodb:bi_connector_odbc_driver:1.4.4
-
cpe:2.3:a:mongodb:bi_connector_odbc_driver:1.4.5
-
cpe:2.3:a:mongodb:bi_connector_odbc_driver:1.4.6
-
cpe:2.3:a:mongodb:bi_connector_odbc_driver:1.4.7
-
cpe:2.3:a:mongodb:bi_connector_odbc_driver:1.4.8
-
cpe:2.3:a:mongodb:bi_connector_odbc_driver:1.4.9