CVE-2026-93765 | MongoDB Mongoid up to 8.0.12/8.1.12/9.0.11/9.1.0 Document Persistence Layer externally-controlled input to select classes or code

September 18, 2026 Yanac

A vulnerability classified as critical was found in MongoDB Mongoid up to 8.0.12/8.1.12/9.0.11/9.1.0. This vulnerability affects unknown code of the component Document Persistence Layer. The manipulation results in use of externally-controlled input to select classes or code.

This vulnerability is reported as CVE-2026-93765. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More