Memory Corruption Vulnerability in MongoDB Server's Timeseries Collections

CVE-2026-18693

What is CVE-2026-18693?

A vulnerability exists in MongoDB Server's management of timeseries collections that allows authenticated users with write permissions to disrupt internal data structures through specific document insertions. This inconsistency may lead to a scenario during subsequent insertions where the server accesses memory outside its designated bounds. The consequences may include crashing the server, revealing limited content from memory, or corrupting the memory state.

References