CVE-2026-18690

creationtimestamp| type| source ---|---|--- 2026-08-12 18:12:06+00:00| seen| https://bsky.app/profile/hn100.bsky.social/post/3msvq56imlz2z 2026-08-12 18:14:21+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3msvqban5yo2c 2026-08-13 04:45:09+00:00| seen|...

CVE-2026-18690

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-18690 Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper...