UpHeron
All vulnerabilities

Servers and applications

CVE-2026-5170

A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the cluster is being promoted from a replica set to a sharded cluster. This may cause a denial of service by taking down the primary of the replica set. This issue affects MongoDB Server v8.2 versions prior to 8.2.2, MongoDB Server…

Severity
Medium 6.0
Published
30 Mar 2026
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
7.0.31, 8.0.18, 8.2.2
Sources
NVD

Affected software

SoftwareAffected versions
MongoDBServers and applications · cpe:a:mongodb:mongodb
  • From 7.0.0 before 7.0.31
  • From 8.0.0 before 8.0.18
  • From 8.2.0 before 8.2.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-5170
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-5170