CVE-2026-93760

Mongoid does not restrict which query operators may come from caller-supplied filter data when an application hands that data to its query-building methods. In an application that forwards externally supplied filter parameters in this way, a party with no credentials may influence how the database evaluates the query. This may result in unintended disclosure of stored field values and in reduced database performance.

• CWE-943

• https://jira.mongodb.org/browse/MONGOID-5994Permissions Required

Published

Sep 18, 2026

Last Modified

Sep 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-93753deepmerge through 4.3.1 contains a prototype poisoning vulne…7.5
• CVE-2026-93756The Smash Balloon Social Post Feed – Simple Social Feeds for…7.2
• CVE-2026-93757The Wild Apricot Login plugin for WordPress is vulnerable to…7.5
• CVE-2026-93758An insecure direct object reference in the nested attributes…8.1
• CVE-2026-93759Mongoid does not neutralize a string-typed query criterion s…8.6
• CVE-2026-9376A vulnerability was determined in JPress up to 1.0.3. The af…6.3
• CVE-2026-93761An inefficient regular expression complexity issue in the in…7.5
• CVE-2026-93762Mongoid contains an unsafe reflection weakness in the query …9.8
• CVE-2026-93763A protection mechanism failure in the object-document mapper…6.5
• CVE-2026-93764Mongoid may omit encryption rules for fields declared on emb…6.5
• CVE-2026-93765Mongoid contains an unsafe reflection weakness in the docume…9.1
• CVE-2026-93767The Tainacan plugin for WordPress is vulnerable to Directory…6.5