CVE-2026-18700
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
An authenticated user with write privileges can cause a use-after-free condition through concurrent operations on a collection with a certain validator type, leading to a server crash and denial of service.
Risk Assessment
The vulnerability can cause server crashes, resulting in service unavailability and potential data loss during operations.
Recommendation
It is recommended to update MongoDB to a patched version and restrict write privileges to reduce the risk of exploitation.
Original NVD description (English source)
An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed, through concurrent operations against a collection using a certain type of validator. This could result in a server crash, leading to a denial of service.