1. Home
  2. CVE Database
  3. CVE-2026-18700
MEDIUM · 6.5

CVE-2026-18700

An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed, through...

Vulnerability Description

An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed, through concurrent operations against a collection using a certain type of validator. This could result in a server crash, leading to a denial of service.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
MongodbMongodb>= 7.0.0, < 7.0.40

Related Weaknesses (CWE)

CWE-416

References

FAQ

What is CVE-2026-18700?

CVE-2026-18700 is a vulnerability with a CVSS score of 6.5 (MEDIUM). An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed, through...

How severe is CVE-2026-18700?

CVE-2026-18700 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-18700?

Check the references section above for vendor advisories and patch information. Affected products include: Mongodb Mongodb.