Threats tagged 'ghsa-g2m8-vcxw-5h4c'

CVE-2026-18709 is a vulnerability in MongoDB Server that allows an authenticated user with direct network access to a shard to improperly commit or abort an in-progress prepared transaction. This bypasses the intended transaction coordination process and can lead to cross-shard data inconsistency, cluster clock corruption, and violation of transaction atomicity guarantees. The vulnerability has a CVSS score of 6.4, indicating medium severity. No affected versions or patch information are provided in the available data.