Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the cluster is being promoted from a replica set to a sharded cluster. This may cause a denial of service by taking down the primary of the replica set. This issue affects MongoDB Server v8.2 versions prior to 8.2.2, MongoDB Server v8.0 versions between 8.0.18, MongoDB Server v7.0 versions between 7.0.31.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-30 | 1 | Disclosure1 |
| 2026-03-31 | 2 | Disclosure2 |
CVE-2026-5170 A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the c… https://www.cve.org/CVERecord?id=CVE-2026-5170
Post summary
The passage announces CVE-2026-5170, highlighting that users with constrained cluster privileges can cause a mongod crash within a narrow, unpredictable timeframe.
🚨*CVE* CVE-2026-5170 A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the c… https://www.cve.org/CVERecord?id=CVE-2026-5170 ----- Traducción: CVE-2026-5170 Un … http://infoflow.cloud`
Post summary
The text references CVE-2026-5170 as a crash vulnerability in MongoDB triggered by users with limited cluster privileges, but it does not provide evidence of a PoC, exploit, patch, or active exploitation.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5170 - Users could trigger a crash of mongod primaries during promotion to sharded Intel Report: https://ift.tt/Vs7j4pB
Post summary
CVE-2026-5170 causes a crash of mongod primaries during sharding promotion, as reported in a threat alert.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mongodb | mongodb | - | - | - |