Security Advisory

CVE-2026-9746

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-09 22:02:12

Last updated 2026-06-10 13:22:35

Assigner mongodb

CVSS score 7.1

State PUBLISHED

Description

When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash. There are no special privileges needed. The user must be logged in to issue the statement.

← Browse all CVEs View on cve.org ↗