CVE-2026-18688
HIGH
NVD
CVSS Score
7.1
Severity
HIGH
Published
Aug 11, 2026
Vendor
unknown
Description
An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash (denial of service) and may potentially expose a limited amount of memory contents.