Servers and applications
CVE-2026-18693
An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain document insertions. A subsequent insert into the affected bucket could then result in the server accessing memory outside its intended bounds, potentially causing a server crash (denial of service),…
- Severity
- High 7.2
- Published
- 11 Aug 2026
- Last changed
- 16 Sept 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 7.0.40, 8.0.29, 8.3.8
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
MongoDBServers and applications · cpe:a:mongodb:mongodb |
All 7 release lines
|