CVE-2026-18700

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description An issue in geospatial validation allows an authenticated user with write privileges to trigger a use-after-free condition. This occurs through concurrent operations against a collection that utilizes a specific type of validator, which can lead to a server crash and a subsequent denial of service. A use-after-free is a memory corruption issue where a program continues to use a pointer after the memory it points to has been released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.