Threats tagged 'ghsa-vh87-wfq5-jrqm'

CVE-2026-18698 is a vulnerability in MongoDB Server that allows an authenticated user with a limited database-scoped role to perform actions on protected system collections that normally require higher privileges. This can lead to exposure of collection metadata and, in some deployment configurations, unauthorized modification of system collection data. The vulnerability has a CVSS score of 5.4, indicating a moderate to high severity impact.