Is CVE-2026-18707 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-18707?

CVE-2026-18707 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-18707

Description

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service.