What is CVE-2026-107325?

CVE-2026-107325 is a security advisory published by Microsoft Security Response Center (MSRC) with Medium severity. Application denial of service via missing BSON array length validation in MongoDB Go Driver

Which CVE IDs does CVE-2026-107325 cover?

CVE-2026-107325 covers the following CVE IDs: CVE-2026-107325. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2026-107325?

CVE-2026-107325 has a CVSS v3 base score of 5.9, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2026-107325?

CVE-2026-107325 affects 8 products, including: azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0; azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0; azl3 keda 2.14.1-19 on Azure Linux 3.0; azl3 kubevirt 1.8.4-2 on Azure Linux 3.0; azl3 libcontainers-common 20240213-3 on Azure Linux 3.0; and others — see the full list on the advisory page.

CVE-2026-107325MediumCVSS 5.9

Application denial of service via missing BSON array length validation in MongoDB Go Driver

Vendor

Microsoft Security Response Center (MSRC)

Published

October 11, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-107325 →

🎯 Affected products8

azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0
azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0
azl3 keda 2.14.1-19 on Azure Linux 3.0
azl3 kubevirt 1.8.4-2 on Azure Linux 3.0
azl3 libcontainers-common 20240213-3 on Azure Linux 3.0
azl3 packer 1.9.5-21 on Azure Linux 3.0
azl3 skopeo 1.14.4-13 on Azure Linux 3.0
azl3 telegraf 1.31.0-33 on Azure Linux 3.0

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107325
referencehttps://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade