CVE-2026-0529CWE-129

Improper Validation of Array Index in Packetbeat Leading to Overflow Buffers

Medium · published January 14, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers (CAPEC-100) through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol parsing is enabled.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.5th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2026-01-14T10:09Z
EPSS history
Timeline
  • 14 JAN 10:09Z
    Improper Validation of Array Index in Packetbeat Leading to Overflow Buffers
    cvelistv5