CVE-2026-93394

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-93394

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93394.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-93394

Downstream

Published

2026-09-17T20:31:27Z

Modified

2026-09-27T03:47:38Z

Severity

6.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

libmongoc SCRAM client nonce-validation bypass

Details

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by injecting a crafted server-first-message containing a controlled salt and low iteration count, then capturing the resulting client proof to perform offline password cracking. This vulnerability is mitigated by TLS, which is standard in production deployments.

Database specific

{
    "cna_assigner":  "mongodb",
    "cwe_ids":  [
        "CWE-303"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93394.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "2.0.0"
                },
                {
                    "fixed":  "2.3.2"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/mongodb/mongo-c-driver

Affected ranges

Type

GIT

Repo

https://github.com/mongodb/mongo-c-driver

Events

Introduced

67817df0a9ed11b07e457477e6db1384da9421c4

Fixed

76e9b7d7a2363f765a125e8015e48c7b3ff4899e

Database specific

Show details

{
    "cpe":  "cpe:2.3:a:mongodb:c_driver:*:*:*:*:*:mongodb:*:*",
    "extracted_events":  [
        {
            "introduced":  "2.0.0"
        },
        {
            "fixed":  "2.3.2"
        }
    ],
    "source":  "CPE_RANGE"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93394.json"