CVE-2026-18711 — HIGH (7.1)

Vulnerability Description

An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to cause an internal reference to be used after the underlying memory has been freed, when running certain queries against time-series collections. This could result in a server crash or disclosure of freed memory contents within query results.

CVSS Score

7.1

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

NONE

Availability

HIGH

Related Weaknesses (CWE)

CWE-416

References

https://jira.mongodb.org/browse/SERVER-130247

FAQ

What is CVE-2026-18711?

CVE-2026-18711 is a vulnerability with a CVSS score of 7.1 (HIGH). An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to cause an internal reference to be used after the underlying memory has been free...

How severe is CVE-2026-18711?

CVE-2026-18711 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-18711?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.