← Vulnerability feed

Vulnerability record · CVE-2026-18710 · published 11 August 2026

CVE-2026-18710: Mongodb java driver sensitive information in log file vulnerability

Mongodb · Java Driver

A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext during routine client initialization. This occurs automatically as part of normal operation and requires no special privileges to trigger. A party able to read the affected application's logs or downstream log-aggregation storage could recover the credential and reuse it to authenticate to the associated network infrastructure. This issue affects confidentiality only.

8.2 CVSS 4.0 High EPSS 0.15% · top 96.9% CWE-532 · Sensitive information in log file
8.2CVSS 4.0 base score
0.15%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
25 Sep 2026Last modified by NVD

Description

A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext during routine client initialization. This occurs automatically as part of normal operation and requires no special privileges to trigger. A party able to read the affected application's logs or downstream log-aggregation storage could recover the credential and reuse it to authenticate to the associated network infrastructure. This issue affects confidentiality only.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://jira.mongodb.org/browse/JAVA-6266 Vendor AdvisoryIssue Tracking

Track CVE-2026-18710 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.2CVE-2026-88032Mongodb java driver use after free vulnerabilityA use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected…EPSS 0.26%6.8CVE-2021-20328Mongodb java driver improper certificate validation vulnerabilitySpecific versions of the Java driver that support client-side field level encryption (CSFLE) fail to perform correct host name verification on the KM…EPSS 0.43%6.1CVE-2026-88033Mongodb java driver vulnerabilityImproper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-supplied struct…EPSS 0.46%4.6CVE-2025-24984Windows NTFS logs sensitive information, enabling physical-attack disclosureWindows NTFS writes sensitive information into a log file, which an attacker can read to disclose data. The flaw is rated CVSS 3.1 4.6 (Medium) and a…KEVEPSS 2.0%analysed4.4CVE-2023-21492Samsung Android kernel pointer logging enables ASLR bypassSamsung Android devices log kernel pointers to a log file before the SMR May-2023 Release 1 fix. A privileged local attacker who can read those logs …KEVEPSS 2.6%analysed

Source: NIST National Vulnerability Database (record CVE-2026-18710), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.