CVE-2026-18708

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description An issue in the JavaScript scripting engine allows an authenticated user with write privileges to execute controlled code within the query scope of other users. This occurs when a specially crafted stored value is processed during an internal maintenance cycle. The impact includes the corruption of query results for other users and denial of service for their operations on the same database. Execution is restricted to the scripting engine's sandbox, preventing access to the filesystem, network resources, or the database itself.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.