CVE-2026-18699 — Improper Input Validation in MongoDB Query Planner Leads to Denial of Service
An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a spe…
Published: 2026-08-11 · CVSS: 6.0 · CVSS 4.0
An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specially formed query against a collection with a text index. This could result in a denial of service, affecting connected clients and in-flight operations.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7