Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-114643— Duplicate geometry fields via unvalidated GeoJSON extra members

Quick assessment

Affected
MongoDB C# Driver
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

MongoDB C驱动程序在写入 GeoJSON 的额外字段时，未检查其字段名是否与 GeoJSON 保留字段（如 type 和 coordinates）发生冲突。若应用程序将用户提供的字段名放入这些额外字段中，则可能存储包含重复几何字段的文档，导致服务器与驱动程序对同一记录解析出不同的值。受影响的记录还可能无法通过驱动程序读取，从而中断读取这些记录的应用程序代码。

CVSS 5.4 · Medium

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
MongoDB C# Driver 1.8.0< 3.13.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-114643

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Duplicate geometry fields via unvalidated GeoJSON extra members
Source: CVE Program / CVE List V5
Vulnerability Description
The MongoDB C# Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON members such as type and coordinates. An application that places user-supplied field names into these extra members can store documents with duplicate geometry fields, so the server and the driver resolve different values for the same record. Affected records can also become unreadable through the driver, interrupting application code that reads them.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
使用多个具有重复标识的资源
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
MongoDB C# Driver 1.8.0 ~ 3.13.0 -

II. Public POCs for CVE-2026-114643

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-114643

请登录查看更多情报信息。

Other References for CVE-2026-114643 (3)

Same Patch Batch · MongoDB · 2026-10-22 · 13 CVEs total

CVE-2026-114648 7.6 HIGH NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary ke
CVE-2026-114649 6.8 MEDIUM Authentication bypass via issuer-and-serial-only certificate equality in shared cluster ca
CVE-2026-114652 6.5 MEDIUM Update operator injection via single-element list rewriting in the update builder
CVE-2026-114646 6.5 MEDIUM NoSQL command injection via mismatched raw BSON length prefix written verbatim to the wire
CVE-2026-114654 6.5 MEDIUM BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards
CVE-2026-114653 6.5 MEDIUM Silent client-side encryption bypass via unescaped field-name regex in CSFLE schema builde
CVE-2026-114655 5.9 MEDIUM KMS request injection via unsanitized key vault and provider values in libmongocrypt
CVE-2026-114650 5.9 MEDIUM Plaintext exposure of encrypted fields via ANSI code-page corruption of database name
CVE-2026-114644 5.9 MEDIUM Memory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deseri
CVE-2026-114645 5.2 MEDIUM Heap overflow via 32-bit length wrap of the URI username in Windows Kerberos auth message
CVE-2026-114647 4.3 MEDIUM NoSQL operator injection via unvalidated replacement document in findOneAndReplace
CVE-2026-114651 4.0 MEDIUM Cross-document data leak via malformed BSON array parsing in reused thread buffer

IV. Related Vulnerabilities

Same product: C# Driver
Same vendor: MongoDB
Same weakness: CWE-694

V. Comments for CVE-2026-114643

No comments yet

Leave a comment