AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-18709

MEDIUM · CVSS 6.4 EPSS 0.14%

Source: NVD + CISA KEV + EPSS · Published 2026-08-11 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

MongoDB Server is vulnerable to a flaw that enables an authenticated user with direct network access to a shard to improperly manipulate in-progress prepared transactions, potentially leading to cross-shard data inconsistency and violations of transaction atomicity. This could compromise the integrity of data across the cluster and disrupt transaction coordination. Organizations using MongoDB should prioritize addressing this vulnerability to maintain data consistency and reliability within their systems.

CVE
CVE-2026-18709
Severity
MEDIUM
CVSS
6.4
EPSS
0.14%
MongoDB

Original NVD Description

An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit or abort an in-progress prepared transaction, bypassing the intended transaction coordination process. This could result in cross-shard data inconsistency, cluster clock corruption, and violation of transaction atomicity guarantees.