CVE-2026-9746 | MongoDB Server up to 7.0.34/8.0.23/8.2.9/8.3.2 changestreams/_requestReshardingResumeToken assertion

June 10, 2026 Yanac

A vulnerability labeled as problematic has been found in MongoDB Server up to 7.0.34/8.0.23/8.2.9/8.3.2. Impacted is an unknown function. Such manipulation of the argument changestreams/_requestReshardingResumeToken leads to reachable assertion.

This vulnerability is referenced as CVE-2026-9746. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More