FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

MongoDB Server -- CWE-617: Reachable Assertion

Affected packages
mongodb80 < 8.0.18
mongodb70 < 7.0.31

Details

VuXML ID a117f43b-2f7b-11f1-89f4-b42e991fc52e
Discovery 2026-03-30
Entry 2026-04-03

https://jira.mongodb.org/browse/SERVER-101758 reports:

A user with access to the cluster with a limited set of privilege actions can trigger a crash of amongod process during the limited and unpredictable window when the cluster is being promoted from a replica set to a sharded cluster. This may cause a denial of service by taking down the primary of the replica set.

References

CVE Name CVE-2026-5170
URL https://cveawg.mitre.org/api/cve/CVE-2026-5170