An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory copied into an error message that is returned to application code. This may result in unintended disclosure of limited memory contents.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-caf49a7828 advisory.

    ## Version 2.1.9

    - PHPC-2744 Fix out-of-bounds read when building BSON field path by @paulinevos & @GromNaN in #2081
    **CVE-2026-84968**



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-358d3ccdfe advisory.

    ## Version 2.1.9

    - PHPC-2744 Fix out-of-bounds read when building BSON field path by @paulinevos & @GromNaN in #2081
    **CVE-2026-84968**



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1576c48cce advisory.

    ## Version 2.5.2

    - PHPC-2744 Fix out-of-bounds read when building BSON field path by @paulinevos & @GromNaN in #2081
    **CVE-2026-84968**

    ----

    ## Version 2.5.0

    - Honor the server-supplied `baseBackoffMS` on responses labeled `SystemOverloadedError`, using it in     place of the driver's default base delay when calculating how long to wait before retrying.

    ----

    ## Version 2.4.1

    * PHPC-2742: Bump libmongocrypt to 1.20.2 by @GromNaN in https://github.com/mongodb/mongo-php-     driver/pull/2051
    * PHPC-2755: Fix test suite failures with PHP 8.6 by @GromNaN in https://github.com/mongodb/mongo-php-     driver/pull/2056
    * PHPC-2745: Reject null bytes in namespaces and periods in database names [v2.4] by @GromNaN in     https://github.com/mongodb/mongo-php-driver/pull/2060
    * PHPC-2745: Reject null bytes in namespaces and periods in database names [v1.21] by @GromNaN in     https://github.com/mongodb/mongo-php-driver/pull/2059


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an     unauthenticated party who supplies specially formed input to have a small amount of adjacent process     memory copied into an error message that is returned to application code. This may result in unintended     disclosure of limited memory contents. (CVE-2026-84968)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
346807	Fedora 43 : php-pecl-mongodb2 (2026-caf49a7828)	Nessus	Fedora Local Security Checks	Local	medium
346465	Fedora 44 : php-pecl-mongodb2 (2026-358d3ccdfe)	Nessus	Fedora Local Security Checks	Local	medium
345459	Fedora 45 : php-pecl-mongodb2 (2026-1576c48cce)	Nessus	Fedora Local Security Checks	Local	medium
342828	Linux Distros Unpatched Vulnerability : CVE-2026-84968	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-84968

medium

Tenable Plugins

medium

medium

medium

medium