CVE-2026-0529: Elastic Packetbeat

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers (CAPEC-100) through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol parsing is enabled.

Affected products

• Elastic Packetbeat: from 7.0.0, up to and including 7.17.29; from 8.0.0, up to and including 8.19.9; from 9.0.0, up to and including 9.1.9; from 9.2.0, up to and including 9.2.3

Published 2026-01-14. Last modified 2026-06-17.