HIGH 7.1 NVD

CVE-2026-18687

MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypte

MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypted field configuration before use. An authenticated user with readWrite privileges could submit a specially formed request that leads to a server crash or excessive internal writes, resulting in resource exhaustion and corruption of encrypted index data.

References

https://jira.mongodb.org/browse/SERVER-130628

Published: 2026-08-11 · Source: NVD · Feed updated: 2026-08-11

This high severity vulnerability with a CVSS score of 7.1 was published on 2026-08-11 via NVD.

vulnfeed aggregates 10022 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.