CVE-2026-18688

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description An issue in the aggregation framework allows an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a specific aggregation pipeline stage. This can lead to a server crash, resulting in a denial of service, and may potentially expose a limited amount of memory contents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.