Security Feed

See the latest insights and analysis from our MDR team.
RSS for Slack
CVE-2026-18691
By Stav Salman | 
12 August 2026

MongoDB Server query and aggregation flaws allow DoS and unauthorized access paths

Impact MongoDB Server query execution, Queryable Encryption maintenance, Atlas Vector Search, $graphLookup, aggregation, time-series predicates, applyOps, and geospatial queries. Issues allow authenticated read users and, in one case, unauthenticated parties to cause DoS or unintended behavior. Upgrade to 8.3.8/ 7.0.40/ 8.0.29.

CVEs IDs: CVE-2026-18712, CVE-2026-18711, CVE-2026-18706, CVE-2026-18705, CVE-2026-18704, CVE-2026-18693, CVE-2026-18694, CVE-2026-18695, CVE-2026-18701, CVE-2026-18697, CVE-2026-18696

Full Feed
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS