CVE-2026-18694

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description An issue in geospatial query processing allows an authenticated user with write privileges to store malformed geometry data that is processed without proper validation. Subsequent queries against this data can cause the server to access memory outside its intended bounds, potentially leading to a server crash (denial of service) or the exposure of a limited amount of server process memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.