CVE-2026-18692CWE-416

CVE-2026-18692

High · published August 11, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
46.8
In the wild
Unconfirmed
What it is

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution of unintended code.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00575 · 46.8th percentile
Weakness
CWE-416 · Use After Free
Published
2026-08-11T23:17Z
Affected products (6)
ProductVersionsFixed in
mongodb/mongodb≥ 8.0.0, < 8.0.298.0.29
mongodb/mongodb≥ 8.2.0, ≤ 8.2.12—
mongodb/mongodb≥ 8.3.0, < 8.3.88.3.8
mongodb/mongodball versions—
mongodb/mongodball versions—
mongodb/mongodball versions—
References (1)
https://jira.mongodb.org/browse/SERVER-129887 · [email protected]
EPSS history
Timeline
  • 11 AUG 18:36Z
    Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution
    cvelistv5