Out-of-bounds Read in Mongodb Server
CVE-2026-18694
An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be stored and later processed without proper validation. Subsequent queries agains…
Vulnerability class: Buffer Overflow
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H.
Affected products
- Mongodb Server — versions 8.3.0, 8.0, 7.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-18694?
- CVE-2026-18694 is a high-severity vulnerability in Mongodb Server, classified under Out-of-bounds Read. CVSS score: 7.1/10. Published 2026-08-11.
- How severe is CVE-2026-18694?
- High severity. CVSS v3 base score is 7.1 out of 10.