CVE-2026-18711— Use-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure
Possible ATT&CK Techniques 1AI
T1530 · Data from Cloud StorageAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| MongoDB | MongoDB Server | 8.3.0< 8.3.8 | affected |
8.0< 8.0.29 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-18711
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Use-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure
Source: CVE Program / CVE List V5
Vulnerability Description
An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to cause an internal reference to be used after the underlying memory has been freed, when running certain queries against time-series collections. This could result in a server crash or disclosure of freed memory contents within query results.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
释放后使用
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MongoDB | MongoDB Server | 8.3.0 ~ 8.3.8 | - |
II. Public POCs for CVE-2026-18711
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-18711
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-18711 (1)
Same Patch Batch · MongoDB · 2026-08-11 · 25 CVEs total
| CVE-2026-18692 | 8.8 HIGH | Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potent |
| CVE-2026-18691 | 8.8 HIGH | Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure |
| CVE-2026-18690 | 8.1 HIGH | Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections |
| CVE-2026-18712 | 8.1 HIGH | Improper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unaut |
| CVE-2026-18693 | 7.6 HIGH | Out-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service |
| CVE-2026-18697 | 7.5 HIGH | Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial o |
| CVE-2026-18687 | 7.1 HIGH | Improper Validation in MongoDB Queryable Encryption Maintenance Operation Leads to Denial |
| CVE-2026-18694 | 7.1 HIGH | Out-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and P |
| CVE-2026-18688 | 7.1 HIGH | Out-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potenti |
| CVE-2026-18706 | 6.6 MEDIUM | Use-After-Free in MongoDB $graphLookup Aggregation Stage Leads to Denial of Service and Po |
| CVE-2026-18700 | 6.5 MEDIUM | Use-After-Free in MongoDB Geospatial Validation Leads to Denial of Service |
| CVE-2026-18704 | 6.5 MEDIUM | Improper Authorization in MongoDB Aggregation Framework Allows Read-Only User to Perform U |
| CVE-2026-18701 | 6.5 MEDIUM | Type Confusion in MongoDB Query Subsystem Leads to Denial of Service |
| CVE-2026-18705 | 6.5 MEDIUM | Improper Authorization in MongoDB Atlas Vector Search Allows Unauthorized Access to Protec |
| CVE-2026-18696 | 6.5 MEDIUM | Improper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operat |
| CVE-2026-18695 | 6.5 MEDIUM | Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Servic |
| CVE-2026-18699 | 6.5 MEDIUM | Improper Input Validation in MongoDB Query Planner Leads to Denial of Service |
| CVE-2026-18710 | 6.5 MEDIUM | Cleartext Storage of Sensitive Information in MongoDB Driver Logging During Client Initial |
| CVE-2026-18709 | 6.4 MEDIUM | Missing Authorization in MongoDB Sharded Transaction Commit/Abort Handling Leads to Cross- |
| CVE-2026-18702 | 6.4 MEDIUM | Improper Authorization in MongoDB profile Command Allows Unauthorized Modification of Serv |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: MongoDB Server
- CVE-2026-18712
Improper Authorization in MongoDB Queryable Encryption Maint - CVE-2026-18709
Missing Authorization in MongoDB Sharded Transaction Commit/ - CVE-2026-18698
Improper Authorization in MongoDB Server Allows Unauthorized - CVE-2026-18690
Improper Authorization in MongoDB Server Allows Unauthorized - CVE-2026-18699
Improper Input Validation in MongoDB Query Planner Leads to
Same vendor: MongoDB
- CVE-2026-19004
MongoDB BI Connector ODBC Driver Memory-Safety Issue When Ha - CVE-2026-18888
MongoDB BI Connector ODBC driver may write outside an alloca - CVE-2026-19001
MongoDB BI Connector ODBC driver may write outside an alloca - CVE-2026-19002
Crafted database metadata may cause memory corruption in Mon - CVE-2026-19503
Insufficient OIDC endpoint validation could invoke unintende
V. Comments for CVE-2026-18711
No comments yet