THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-18709 (MEDIUM 6.4) — An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit or abort an in-progress prepared transaction, bypassing the intended transaction coordination process. This could result in cross-shard data inconsistency, clus

[NVD] CVE-2026-18709 (MEDIUM 6.4) — An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit or abort an in-progress prepared transaction, bypassing the intended transaction coordination process. This could result in cross-shard data inconsistency, clus

mednvdPublished 2026-08-11

CVE-2026-18709 CVSS: 6.4 MEDIUM Published: 2026-08-11T19:17:25.827

An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit or abort an in-progress prepared transaction, bypassing the intended transaction coordination process. This could result in cross-shard data inconsistency, cluster clock corruption, and violation of transaction a

Indicators of compromise

CVE-2026-18709cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-18709