CVE-2026-18690 in Serverالمعلومات

الملخص

بحسب MITRE • 11/08/2026

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper authorization.

Be aware that VulDB is the high quality source for vulnerability data.

مسؤول

Mongodb

حجز

03/08/2026

إفشاء

11/08/2026

الاعتدال

تمت الموافقة

إدخال

VDB-388447

EPSS

0.00000

KEV

لا

النشاطات

منخفض جدًا

المصادر

Interested in the pricing of exploits?

See the underground prices here!