Threats tagged 'ghsa-rf6p-955q-5j7w'

CVE-2026-18688 is a high-severity vulnerability in MongoDB Server's aggregation framework. An authenticated user can trigger an out-of-bounds memory read by supplying a specially crafted numeric parameter in a specific aggregation pipeline stage. This flaw can cause the server to crash, resulting in a denial of service, and may expose a limited amount of memory contents.