{"vulnerability": "cve-2026-9376", "sightings": [{"uuid": "1195b42e-f8e8-4775-9e9d-134797a60ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93765", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsqurpkvk2k", "content": "\ud83d\udd34 CVE-2026-93765 - Critical (9.1)\n\nMongoid contains an unsafe reflection weakness in the document persistence layer of its object-do...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93765/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T18:02:53.190693Z"}, {"uuid": "3a15f572-1518-4098-886b-b440256e54f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93765", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jzx6i4exkhcn2", "content": "CVE-2026-93765 - Document deletion and process crash via unvalidated method-name dispatch in atomic pop operation\nCVE ID : CVE-2026-93765\n \n Published : Sept. 18, 2026, 5:17 p.m. | 23\u00a0minutes ago\n \n Description : Mongoid contains an unsafe reflection weakness in the document p...", "creation_timestamp": "2026-09-18T18:03:31.457576Z"}, {"uuid": "35102413-a25f-4637-9a9a-bd1fbf91a8dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93761", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/alghf3pafebby", "content": "CVE-2026-93761 - Denial of service via unbounded regex matching in Mongoid's in-memory query matcher\nCVE ID : CVE-2026-93761\n \n Published : Sept. 18, 2026, 5:20 p.m. | 20\u00a0minutes ago\n \n Description : An inefficient regular expression complexity issue in the in-memory query eva...", "creation_timestamp": "2026-09-18T18:15:31.701613Z"}, {"uuid": "922ec896-e8f6-47fa-813c-d73e9b4c47c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/az2jn65gliwr6", "content": "CVE-2026-93760 - NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guard\nCVE ID : CVE-2026-93760\n \n Published : Sept. 18, 2026, 5:24 p.m. | 16\u00a0minutes ago\n \n Description : Mongoid does not restrict which query operators may come from caller...", "creation_timestamp": "2026-09-18T18:17:31.884306Z"}, {"uuid": "b1ff0762-5805-4594-8ec1-04e59302b24b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93764", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fcejtgt7djo5x", "content": "CVE-2026-93764 - Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation\nCVE ID : CVE-2026-93764\n \n Published : Sept. 18, 2026, 6:18 p.m. | 21\u00a0minutes ago\n \n Description : Mongoid may omit encryption rules for fields declared on embedd...", "creation_timestamp": "2026-09-18T19:15:32.461305Z"}, {"uuid": "4b6515f9-da2f-468e-8cb9-d34e139b7366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93763", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jfusqverdgfjx", "content": "CVE-2026-93763 - Silent plaintext persistence via unresolved callable database name in encryption schema map\nCVE ID : CVE-2026-93763\n \n Published : Sept. 18, 2026, 6:18 p.m. | 21\u00a0minutes ago\n \n Description : A protection mechanism failure in the object-document mapper's encryp...", "creation_timestamp": "2026-09-18T19:17:40.207528Z"}, {"uuid": "fb2efd9a-1693-4540-a19e-f75a77260fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93762", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvsxwhsusd2y", "content": "\ud83d\udea8 CVE-2026-93762 \u2014 CVSS 9.2 CRITICAL\n\nMongoid contains an unsafe reflection weakness in the query path used for embedded documents. An applicatio...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93762\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T20:09:05.441693Z"}, {"uuid": "a14fbfcd-a6b1-4c78-9cb1-0374c1e2ab53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93762", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsxit3s2w2s", "content": "\ud83d\udd34 CVE-2026-93762 - Critical (9.8)\n\nMongoid contains an unsafe reflection weakness in the query path used for embedded documents. An ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93762/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T20:01:28.461487Z"}, {"uuid": "b8aa9158-02ca-4c26-9f2e-cb7363e9eba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93760", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsxkugfof2z", "content": "\ud83d\udfe0 CVE-2026-93760 - High (8.2)\n\nMongoid does not restrict which query operators may come from caller-supplied filter data when an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93760/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T20:02:37.174825Z"}, {"uuid": "08b85728-d396-4afa-b34b-752344cc33cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93761", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsxl3vg7l2k", "content": "\ud83d\udfe0 CVE-2026-93761 - High (7.5)\n\nAn inefficient regular expression complexity issue in the in-memory query evaluation component of...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93761/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T20:02:45.067005Z"}, {"uuid": "f9a86198-fe8f-450e-9bb4-df81bab04b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93762", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvt7apjcta2w", "content": "CVE-2026-93762 - mongoid\nMongoid, the Ruby library that connects applications to MongoDB, can be tricked into revealing private document information and deleting records when it processes a field name\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mongoid #mongodb #CVE #infosec", "creation_timestamp": "2026-09-18T22:20:05.429767Z"}]}