CVE-2026-112368Suited to automated attack · CISA
Unbounded Recursion in phongo_bson_visit_document/visit_array:
CVSS score
8.2
EPSS probability
%0.3
Risk score
0.0
Published
1 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.2
CVE-2026-93762Data deletion and attribute disclosure via field-name method injection in in-memory queries
Patch status unknownEPSS %1
8.3
CVE-2026-93760NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guard
Patch status unknownEPSS %1
9.2
CVE-2026-93393Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream
Patch status unknownEPSS %0
8.3
CVE-2026-93765Document deletion and process crash via unvalidated method-name dispatch in atomic pop operation
Patch status unknownEPSS %1
8.7
CVE-2026-93761Denial of service via unbounded regex matching in Mongoid's in-memory query matcher
Patch status unknownEPSS %0
8.8
CVE-2026-93759Server-side JavaScript injection via string query criteria bypassing the strict operator allowlist
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-112368"