VulnSocial

CVE-2026-93762Disclosure(mongodb / mongoid)

LOWCVSS 9.2 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch mongodb mongoid systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Mongoid contains an unsafe reflection weakness in the query path used for embedded documents. An application that passes an externally supplied field name to certain in-memory query methods may allow an unauthenticated party to obtain unintended disclosure of stored document data and to permanently remove stored records.

mongodb CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-470

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • mongoid

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
mongodb
Products
mongoid

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-09-21: 2Patch / Workaround · 2026-09-21: 1Technical Details · 2026-09-21: 209-21
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
Full discourse2 posts
  • Daily CyberSecurity@Daily_CyberSec
    Patch

    Critical MongoDB driver vulnerabilities, including CVE-2026-93762, expose systems to data loss and DoS. Learn about these flaws and patch immediately. #MongoDB #Cybersecurity #Vulnerability #Infosec #CVE https://securityonline.info/mongodb-driver-vulnerabilities-cve/

    Post summary

    The tweet warns of critical MongoDB driver vulnerabilities, including CVE‑2026‑93762, that can cause data loss and denial of service, and stresses the need to apply patches right away.

    11071512
    13.0K followersView on X
  • Cybersecurity News DE@cybsecuritynews
    Disclosure

    #schwachstellen CVE-2026-93762: Kritische Mongoid-Schwachstelle gefährdet eingebettete Dokumente #cve202693762 #mongodb #mongoid #ruby https://cybersecurity-news.de/cve-2026-93762-mongoid-kritische-schwachstelle

    Post summary

    The text announces a critical vulnerability (CVE-2026-93762) in Mongoid affecting embedded documents, providing technical details such as the vulnerability type and affected technologies (MongoDB, Ruby) but does not mention exploits, PoCs, patches, or active exploitation.

    0000038
    13 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appmongodbmongoid---
Appmongodbmongoid9.1.0--

Explore more

Back to dashboardmongodb CVEsmongoid vulnerabilities