Medium WID-SEC-2026-0920 1 CVE

MongoDB: Schwachstelle ermöglicht Denial of Service

Published Mar 30, 2026 · Updated Mar 30, 2026 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in MongoDB ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

MongoDB ist ein Open-Source-Dokumentendatenbank.

Vulnerabilities 1

Medium 5.3

CVE-2026-5170

Users could trigger a crash of mongod primaries during promotion to sharded

A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the cluster is being promoted from a replica set to a sharded cluster. This may cause a denial o…

MongoDB MongoDB Server mongodb Ubuntu

Mar 30, 2026

Revision history

2026-03-30 #1
Initiale Fassung

References

NIST Vulnerability Databse vom 2026-03-30
https://nvd.nist.gov/vuln/detail/CVE-2026-5170
MongoDB Issues vom 2026-03-30
https://jira.mongodb.org/browse/SERVER-101758