CVE-2026-18709
MEDIUM
NVD
CVSS Score
6.4
Severity
MEDIUM
Published
Aug 11, 2026
Vendor
unknown
Description
An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit or abort an in-progress prepared transaction, bypassing the intended transaction coordination process. This could result in cross-shard data inconsistency, cluster clock corruption, and violation of transaction atomicity guarantees.