What is CVE-2026-18700?

CVE-2026-18700 is a medium-severity vulnerability in Mongodb Server, classified under Use After Free. CVSS score: 6.5/10. Published 2026-08-11.

How severe is CVE-2026-18700?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Use After Free in Mongodb Server

CVE-2026-18700

An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed, through concurrent operations against a collec…

Vulnerability class: Use-After-Free

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Mongodb Server — versions 8.3.0, 8.0, 7.0

Weakness classification (CWE)

CWE-416 — Use After Free

References

cna@mongodb.com

Frequently asked questions

What is CVE-2026-18700?: CVE-2026-18700 is a medium-severity vulnerability in Mongodb Server, classified under Use After Free. CVSS score: 6.5/10. Published 2026-08-11.
How severe is CVE-2026-18700?: Medium severity. CVSS v3 base score is 6.5 out of 10.