CVE-2026-93762

Name of the Vulnerable Software and Affected Versions Mongoid (affected versions not specified)

Description An unsafe reflection weakness exists in the query path used for embedded documents. If an application passes an externally supplied field name to specific in-memory query methods, an unauthenticated party could cause the unintended disclosure of stored document data or the permanent removal of stored records. This issue may also expose systems to Denial of Service (DoS) and data loss.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.