CVE-2026-93760: Mongoid fails to restrict query operators from caller-supplied filters, letting unauthenticated attackers influence DB queries. Info disclosure and performance hits. CVSS 8.2, no patch yet. Audit your filter https://www.valtersit.com/cve/CVE-2026-93760/ #CVE #infosec #Mongoid
