CVE-2026-18707
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A vulnerability in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service.
Risk Assessment
The risk is that an unprivileged user can easily trigger a server crash, leading to service unavailability for all users.
Recommendation
It is recommended to update MongoDB Server to a patched version and monitor traffic for suspicious aggregation commands.
Original NVD description (English source)
An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service.