Dashboard / CVE-2026-18691

CVE-2026-18691

CRITICAL
INFO Priority: 0.03 BB Relevance: 63/100
Published: 2026-08-11 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: X
AT: Present
VC: High
VI: High
VA: High

Description

An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica set member connects to another. Under certain conditions, this could cause the cluster's shared internal credential to be transmitted in a less-protected form, potentially allowing that credential to be recovered. If recovered, the credential could be used to authenticate as the internal superuser to nodes in the deployment.

Weakness Classification (1)

Affected Software (7)

VendorProductVersion
mongodb mongodb 7.0.0 – 7.0.40
mongodb mongodb 8.0.0 – 8.0.29
mongodb mongodb 8.2.0 – 8.2.12
mongodb mongodb 8.3.0 – 8.3.8
mongodb mongodb 9.0.0
mongodb mongodb 9.0.0
mongodb mongodb 9.1.0

References & Advisories (1)

https://jira.mongodb.org/browse/SERVER-130264
Vendor Advisory Issue Tracking

Bug Bounty Relevance

63 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.0 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.36%
Raw Score 0.003550
Percentile 29.1%
Date 2026-10-28

Intelligence Sources

nvd ref →

External Links