THREATOPS
THREAT OPSThreat News › [NVD] CVE-2026-18707 (MEDIUM 4.3) — An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service.

[NVD] CVE-2026-18707 (MEDIUM 4.3) — An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service.

mednvdPublished 2026-08-11

CVE-2026-18707 CVSS: 4.3 MEDIUM Published: 2026-08-11T19:17:25.517

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service.

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-18707