[NVD] CVE-2026-18691 (HIGH 8.8) — An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica set member connects to another. Under certain conditions, this could cause the cluster's shared intern

CVE-2026-18691 CVSS: 8.8 HIGH Published: 2026-08-11T19:17:22.903

An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica set member connects to another. Under certain conditions, this could cause the cluster's shared internal credential to be transmitted in a less-protected fo