1. Home
  2. CVE Database
  3. CVE-2026-18693
HIGH · 7.6

CVE-2026-18693

An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain docum...

Vulnerability Description

An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain document insertions. A subsequent insert into the affected bucket could then result in the server accessing memory outside its intended bounds, potentially causing a server crash (denial of service), exposure of limited memory contents, or memory corruption.

CVSS Score

7.6

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
HIGH

Affected Products

VendorProductVersions
MongodbMongodb>= 7.0.0, < 7.0.40

Related Weaknesses (CWE)

CWE-787

References

FAQ

What is CVE-2026-18693?

CVE-2026-18693 is a vulnerability with a CVSS score of 7.6 (HIGH). An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain docum...

How severe is CVE-2026-18693?

CVE-2026-18693 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-18693?

Check the references section above for vendor advisories and patch information. Affected products include: Mongodb Mongodb.