CVE-2026-18707 — MEDIUM (4.3)

Q: How severe is CVE-2026-18707?

CVE-2026-18707 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2026-18707?

Check the references section above for vendor advisories and patch information. Affected products include: Mongodb Mongodb.

Vulnerability Description

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

LOW

Affected Products

Vendor	Product	Versions
Mongodb	Mongodb	>= 7.0.0, < 7.0.40

Related Weaknesses (CWE)

CWE-617

References

https://jira.mongodb.org/browse/SERVER-128482Vendor AdvisoryIssue Tracking

FAQ

What is CVE-2026-18707?

CVE-2026-18707 is a vulnerability with a CVSS score of 4.3 (MEDIUM). An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregat...

How severe is CVE-2026-18707?

CVE-2026-18707 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-18707?

Check the references section above for vendor advisories and patch information. Affected products include: Mongodb Mongodb.