VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Sep 18, 2026· Updated Sep 24, 2026

CVE-2026-93762

CVE-2026-93762

Description

Mongoid contains an unsafe reflection weakness in the query path used for embedded documents. An application that passes an externally supplied field name to certain in-memory query methods may allow an unauthenticated party to obtain unintended disclosure of stored document data and to permanently remove stored records.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • MongoDB/Mongoid3 versions
    cpe:2.3:a:mongodb:mongoid:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mongodb:mongoid:*:*:*:*:*:*:*:*range: >=7.5.0,<7.5.4
    • cpe:2.3:a:mongodb:mongoid:9.1.0:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.