VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Aug 11, 2026· Updated Sep 16, 2026

CVE-2026-18707

CVE-2026-18707

Description

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • MongoDB/MongoDB5 versions
    cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*range: >=7.0.0,<7.0.40
    • cpe:2.3:a:mongodb:mongodb:9.0.0:alpha0:*:*:-:-:*:*
    • cpe:2.3:a:mongodb:mongodb:9.0.0:alpha1:*:*:-:-:*:*
    • cpe:2.3:a:mongodb:mongodb:9.1.0:alpha0:*:*:-:-:*:*
    • (no CPE)
  • osv-coords
    pkg:bitnami/mongodb
    Range: >= 7.0.0, < 7.0.40
  • MongoDB/Serverllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

1