CVE-2026-18708

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:57+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18708

The CVE-2026-18708 issue affects MongoDB Server’s JavaScript scripting engine. An authenticated user with write privileges can cause code they control to run within the query scope of other users via a specially crafted stored value processed during an internal maintenance cycle. This can lead to...