632115 matches found
CVE-2026-18700
CVE-2026-18700 describes a use-after-free in MongoDB Server’s geospatial validation. An authenticated user with write privileges can trigger an internal reference to be used after memory is freed via concurrent operations against a collection using a specific validator, potentially crashing the s...
Use-After-Free in MongoDB Geospatial Validation Leads to Denial of Service
An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed, through concurrent operations against a collection using a certain type of validator. This could result ...
CVE-2026-18700
An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed, through concurrent operations against a collection using a certain type of validator. This could result ...
CVE-2026-62893
creationtimestamp| type| source ---|---|--- 2026-08-11 18:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstbadnmuk25 2026-08-11 19:00:38+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:16:38+00:00| seen|...
CVE-2026-18701
An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server process to terminate unexpectedly by submitting a specially formed query filter. This could result in a denial of service...
CVE-2026-18701
MongoDB Server’s query subsystem is affected. An authenticated user with read privileges can submit a specially formed query filter to cause the server process to terminate, resulting in a denial of service. The connected documents confirm the issue but do not specify affected versions or a remed...
EUVD-2026-56912
An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server process to terminate unexpectedly by submitting a specially formed query filter. This could result in a denial of service...
CVE-2026-18701 Type Confusion in MongoDB Query Subsystem Leads to Denial of Service
An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server process to terminate unexpectedly by submitting a specially formed query filter. This could result in a denial of service...
Type Confusion in MongoDB Query Subsystem Leads to Denial of Service
An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server process to terminate unexpectedly by submitting a specially formed query filter. This could result in a denial of service...
CVE-2026-18697
An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the...
Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos
An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the...
CVE-2026-18697
The CVE-2026-18697 entry describes an issue in MongoDB Server’s aggregation framework that can be exploited by an unauthenticated party to cause a mongos router process to terminate, resulting in a denial of service affecting client connections routed through the affected mongos instance. Reporte...
CVE-2026-18697 Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos
An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the...
EUVD-2026-56910
An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the...
EUVD-2026-56909
An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain document insertions. A subsequent insert into the affected bucket could then result in the server...
Out-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory Disclosure
An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain document insertions. A subsequent insert into the affected bucket could then result in the server...
CVE-2026-18693 Out-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory Disclosure
An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain document insertions. A subsequent insert into the affected bucket could then result in the server...
CVE-2026-18693
An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain document insertions. A subsequent insert into the affected bucket could then result in the server...
CVE-2026-18693
CVE-2026-18693 involves MongoDB Server handling of timeseries collections. The issue arises when an authenticated user with write privileges inserts certain documents, which can cause an internal data structure to become inconsistent. A subsequent insert into the affected bucket may trigger memor...
CVE-2026-18692 Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution
An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution o...