PatchTheCVEbi connector odbc driver vulnerabilities and fixes
Recent CVEs affecting bi connector odbc driver, with upgrade or downgrade steps. 5 tracked.
Also searched as: biconnectorodbcdriver.
bi connector odbc driver has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-08-12. Highest priority: CVE-2026-19001 (score 53/100).
- CVE-2026-19001 CRITICAL 9.8 UPGRADE The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application s
- CVE-2026-19004 HIGH 8.1 UPGRADE An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing
- CVE-2026-19002 HIGH 8.1 UPGRADE A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Drive
- CVE-2026-19003 HIGH 7.8 UPGRADE A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC D
- CVE-2026-18888 MEDIUM 6.5 UPGRADE The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the
FAQ
How do I fix bi connector odbc driver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bi connector odbc driver being exploited right now?
None of the tracked bi connector odbc driver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bi connector odbc driver CVE should I patch first?
CVE-2026-19001 currently ranks highest (53/100): The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application s.