Vulnerability Bulletins |
CVE-2026-18712 |
|
| Affected software | MONGODB |
| An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain internal metadata references before they are used to perform operations on other namespaces. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-18712 | |