CVE-2026-18702

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description An issue allows an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings. Instead of affecting only the intended database, these changes impact the entire server. This could lead to the suppression of diagnostic logging server-wide, which may obscure unauthorized activity, or degrade operational monitoring by generating excessive log volume.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.