CVE-2026-93759 | MongoDB Mongoid up to 8.0.12/8.1.12/9.0.11/9.1.0 Query Builder code injection

September 18, 2026 Yanac

A vulnerability has been found in MongoDB Mongoid up to 8.0.12/8.1.12/9.0.11/9.1.0 and classified as critical. Affected by this issue is some unknown functionality of the component Query Builder. This manipulation of the argument Query causes code injection.

This vulnerability appears as CVE-2026-93759. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More