BIT-mongodb-2026-18699

vendorUSosv

Improper Input Validation in MongoDB Query Planner Leads to Denial of Service

view advisory published 2026-09-17Licence: per source

An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specially formed query against a collection with a text index. This could result in a denial of service, affecting connected clients and in-flight operations.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-18699US——
An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specia…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan