BIT-mongodb-2026-18707

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/mongodb/BIT-mongodb-2026-18707.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-mongodb-2026-18707

Aliases

CVE-2026-18707

Published

2026-09-17T11:50:13Z

Modified

2026-09-17T14:45:08Z

Summary

Improper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service

Details

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service.

Database specific

{
    "cpes": [
        "cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:-:*:*"
    ],
    "severity": "Medium"
}

References

Affected packages

Bitnami / mongodb

Package

Name: mongodb
Purl: pkg:bitnami/mongodb

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

7.0.0

Fixed

7.0.40

Introduced

8.0.0

Fixed

8.0.29

Introduced

8.2.0

Fixed

8.3.8

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/mongodb/BIT-mongodb-2026-18707.json"