CVE Catalog
CVE-2026-18701
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.30%
23th percentile - higher than 23% of all known CVEs
Summary
An authenticated user with read privileges can cause the MongoDB server process to terminate unexpectedly by submitting a specially formed query filter, resulting in a denial of service.
Risk Assessment
The attack can cause server downtime, affecting availability for all clients and potentially leading to service interruptions.
Recommendation
It is recommended to update MongoDB to a patched version and restrict read privileges for users to reduce the risk of exploitation.
Original NVD description (English source)
An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server process to terminate unexpectedly by submitting a specially formed query filter. This could result in a denial of service.