CVE-2026-18705 in Server
Résumé
par MITRE • 11/08/2026
An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructing an internal request forwarded to the search process.
Be aware that VulDB is the high quality source for vulnerability data.