All vulnerabilities

Servers and applications

CVE-2026-1847

Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This could stall replication inside the replica set leading to server crash.

Severity
High 7.1
Published
10 Feb 2026
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
7.0.29, 8.0.18, 8.2.4
Sources
NVD

Affected software

SoftwareAffected versions
MongoDBServers and applications · cpe:a:mongodb:mongodb
  • From 7.0.0 before 7.0.29
  • From 8.0.0 before 8.0.18
  • From 8.2.0 before 8.2.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-1847
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-1847