Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-18706

Опубликовано: 11 авг. 2026
Источник: nvd
CVSS3: 6.6
EPSS Низкий

Описание

An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause an internal reference to be used after the underlying memory has been freed. This could result in a server crash or, potentially, execution of unintended code.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 8.3.0 (включая) до 8.3.8 (исключая)
cpe:2.3:a:mongodb:mongodb:9.0.0:alpha0:*:*:-:-:*:*
cpe:2.3:a:mongodb:mongodb:9.0.0:alpha1:*:*:-:-:*:*

EPSS

Процентиль: 28%
0.0034
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 6.6
ubuntu
около 1 месяца назад

An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause an internal reference to be used after the underlying memory has been freed. This could result in a server crash or, potentially, execution of unintended code.

CVSS3: 6.6
debian
около 1 месяца назад

An issue in MongoDB Server's $graphLookup aggregation stage could allo ...

CVSS3: 6.6
github
около 1 месяца назад

An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause an internal reference to be used after the underlying memory has been freed. This could result in a server crash or, potentially, execution of unintended code.

EPSS

Процентиль: 28%
0.0034
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-416