CVE-2026-18695
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
An authenticated user with write access can cause the MongoDB server process to terminate unexpectedly through handling of certain query predicates against time-series collections with a metaField, resulting in a denial of service.
Risk Assessment
The attack can cause server crashes, affecting service availability and potentially causing interruptions in applications using time-series collections.
Recommendation
It is recommended to update MongoDB to a patched version and restrict write privileges to reduce the risk of exploitation.
Original NVD description (English source)
An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write access to cause the server process to terminate unexpectedly, resulting in a denial of service.