Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
MongoDb Reachable Assertion Vulnerability - CVE-2026-9746 - Vulnerability Database
MongoDb

MongoDb Reachable Assertion Vulnerability - CVE-2026-9746

Medium
Reference: CVE-2026-9746
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-9746
Title: MongoDb Reachable Assertion Vulnerability
Overview:

When using changestreams and _requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash. There are no special privileges needed. The user must be logged in to issue the statement.