Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-18709

Опубликовано: 11 авг. 2026
Источник: nvd
CVSS3: 6.4
EPSS Низкий

Описание

An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit or abort an in-progress prepared transaction, bypassing the intended transaction coordination process. This could result in cross-shard data inconsistency, cluster clock corruption, and violation of transaction atomicity guarantees.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 7.0.0 (включая) до 7.0.40 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 8.0.0 (включая) до 8.0.29 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 8.2.0 (включая) до 8.2.12 (включая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 8.3.0 (включая) до 8.3.8 (исключая)
cpe:2.3:a:mongodb:mongodb:9.0.0:alpha0:*:*:-:-:*:*
cpe:2.3:a:mongodb:mongodb:9.0.0:alpha1:*:*:-:-:*:*
cpe:2.3:a:mongodb:mongodb:9.1.0:alpha0:*:*:-:-:*:*

EPSS

Процентиль: 3%
0.00131
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.4
ubuntu
около 1 месяца назад

An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit or abort an in-progress prepared transaction, bypassing the intended transaction coordination process. This could result in cross-shard data inconsistency, cluster clock corruption, and violation of transaction atomicity guarantees.

CVSS3: 6.4
debian
около 1 месяца назад

An issue in MongoDB Server could allow an authenticated user with dire ...

CVSS3: 6.4
github
около 1 месяца назад

An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit or abort an in-progress prepared transaction, bypassing the intended transaction coordination process. This could result in cross-shard data inconsistency, cluster clock corruption, and violation of transaction atomicity guarantees.

EPSS

Процентиль: 3%
0.00131
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-862