What is CVE-2026-18687?

CVE-2026-18687 is a high-severity vulnerability in Mongodb Server, classified under Integer Underflow. CVSS score: 7.1/10. Published 2026-08-11.

How severe is CVE-2026-18687?

High severity. CVSS v3 base score is 7.1 out of 10.

Integer overflow in Mongodb Server

CVE-2026-18687

MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypted field configuration before use. An authenticated user with readWrite privileg…

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H.

Affected products

Mongodb Server — versions 8.3.0, 8.0

Weakness classification (CWE)

CWE-191 — Integer Underflow

References

cna@mongodb.com

Frequently asked questions

What is CVE-2026-18687?: CVE-2026-18687 is a high-severity vulnerability in Mongodb Server, classified under Integer Underflow. CVSS score: 7.1/10. Published 2026-08-11.
How severe is CVE-2026-18687?: High severity. CVSS v3 base score is 7.1 out of 10.