THREAT OPS › Threat News › [NVD] CVE-2026-18697 (HIGH 7.5) — An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections route
[NVD] CVE-2026-18697 (HIGH 7.5) — An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections route
CVE-2026-18697 CVSS: 7.5 HIGH Published: 2026-08-11T19:17:23.983
An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the affected mongos instance.
Indicators of compromise
- CVE-2026-18697cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-18697