CVE-2026-18711

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description An issue in the query execution engine allows an authenticated user with read and write privileges to trigger a use-after-free condition when executing specific queries against time-series collections. A use-after-free occurs when a program continues to use a pointer after the memory it points to has been released, which can lead to unstable behavior. This flaw may result in a server crash or the disclosure of freed memory contents within the query results.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.