THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-18702 (MEDIUM 6.4) — An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression of diagnostic logging server-wide, potent

[NVD] CVE-2026-18702 (MEDIUM 6.4) — An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression of diagnostic logging server-wide, potent

mednvdPublished 2026-08-11

CVE-2026-18702 CVSS: 6.4 MEDIUM Published: 2026-08-11T19:17:24.743

An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression of diagnostic logging server-wide, potentially obscuring unauthorized activity, or degrade op

Indicators of compromise

CVE-2026-18702cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-18702