Ghostwire

CVE-2026-9746: When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which...

HIGH CVSS 7.5

Published: June 9, 2026 | Last Modified: June 9, 2026

Description

When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash. There are no special privileges needed. The user must be logged in to issue the statement.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References