Every CVE Search/ Get API key

CVE-2026-88030

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver

6.1 MediumFix available

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
High
Availability
High

Exploit likelihood

0.27%Unchanged since Sep 11, 2026
90%50%10%1%

What each source reports

CVE List Score used 6.1

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.

Record
CVE-2026-88030
CVSS 4.0
6.1 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Weakness
CWE-943
Updated
2026-11-02
EUVDEUVD-2026-75666 6.1

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.

Record
EUVD-2026-75666
CVSS 4.0
6.1 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-4ww7-gqv6-mffc 6.1

Improper neutralization of special elements in data query logic in the GridFS component of the...

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.

Record
GHSA-4ww7-gqv6-mffc
CVSS 4.0
6.1 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Weakness
CWE-943
Updated
2026-11-02
NVD 6.1

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.

Record
CVE-2026-88030
CVSS 4.0
6.1 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Weakness
CWE-943
Updated
2026-11-02
OSV 6.1

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.

Record
CVE-2026-88030
CVSS 4.0
6.1 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-943
Updated
2026-11-02
OSVDEBIAN-CVE-2026-88030 6.1

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.

Record
DEBIAN-CVE-2026-88030
CVSS 4.0
6.1 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
Show 4 moreShow less
OSVRHSA-2026:73519 8.3

Red Hat Security Advisory: ruby:2.5 security update

Record
RHSA-2026:73519
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:73519 8.3

Important: ruby:2.5 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses (CVE-2026-80212)

  • rubygem-mongo: MongoDB Ruby Driver: Data disclosure and denial of service via query-operator injection (CVE-2026-88030)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:73519
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-88030 6.1

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.

Record
UBUNTU-CVE-2026-88030
CVSS 4.0
6.1 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:73519 No score

Important: ruby:2.5 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses (CVE-2026-80212)
  • rubygem-mongo: MongoDB Ruby Driver: Data disclosure and denial of service via query-operator injection (CVE-2026-88030)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:73519
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ruby
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.9-116.module_el8.10.0+4294+1072b022
2.5.9-116.module_el8.10.0+4294+1072b022
ruby-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.9-116.module_el8.10.0+4294+1072b022
2.5.9-116.module_el8.10.0+4294+1072b022
ruby-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.9-116.module_el8.10.0+4293+d4d7c902
2.5.9-116.module_el8.10.0+4293+d4d7c902
ruby-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.9-116.module_el8.10.0+4294+1072b022
2.5.9-116.module_el8.10.0+4294+1072b022
ruby-irb
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.9-116.module_el8.10.0+4293+d4d7c902
2.5.9-116.module_el8.10.0+4293+d4d7c902
ruby-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.9-116.module_el8.10.0+4293+d4d7c902
2.5.9-116.module_el8.10.0+4293+d4d7c902
ruby-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.9-116.module_el8.10.0+4294+1072b022
2.5.9-116.module_el8.10.0+4294+1072b022
rubygem-abrt
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.3.0-4.module_el8.5.0+2625+ec418553
0.3.0-4.module_el8.5.0+2625+ec418553
rubygem-abrt-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.3.0-4.module_el8.10.0+3871+342e2c2f
0.3.0-4.module_el8.10.0+3871+342e2c2f
rubygem-bigdecimal
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.3.4-116.module_el8.10.0+4294+1072b022
1.3.4-116.module_el8.10.0+4294+1072b022
Show 95 moreShow less
Affected packages
PackageAffectedFixed
rubygem-bigdecimal
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.3.4-116.module_el8.10.0+4293+d4d7c902
1.3.4-116.module_el8.10.0+4293+d4d7c902
rubygem-bson
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.3.0-2.module_el8.5.0+2625+ec418553
4.3.0-2.module_el8.5.0+2625+ec418553
rubygem-bson
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.3.0-2.module_el8.6.0+3170+4b08f9d4
4.3.0-2.module_el8.6.0+3170+4b08f9d4
rubygem-bson
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.3.0-2.module_el8.5.0+259+8cec6917
4.3.0-2.module_el8.5.0+259+8cec6917
rubygem-bson-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.3.0-2.module_el8.5.0+2625+ec418553
4.3.0-2.module_el8.5.0+2625+ec418553
rubygem-bundler
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.16.1-5.module_el8.10.0+3991+5e651d4e
1.16.1-5.module_el8.10.0+3991+5e651d4e
rubygem-bundler-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.16.1-5.module_el8.10.0+3991+5e651d4e
1.16.1-5.module_el8.10.0+3991+5e651d4e
rubygem-did_you_mean
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.2.0-116.module_el8.10.0+4293+d4d7c902
1.2.0-116.module_el8.10.0+4293+d4d7c902
rubygem-io-console
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.4.6-116.module_el8.10.0+4293+d4d7c902
0.4.6-116.module_el8.10.0+4293+d4d7c902
rubygem-io-console
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.4.6-116.module_el8.10.0+4294+1072b022
0.4.6-116.module_el8.10.0+4294+1072b022
rubygem-json
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.1.0-116.module_el8.10.0+4294+1072b022
2.1.0-116.module_el8.10.0+4294+1072b022
rubygem-json
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.1.0-116.module_el8.10.0+4293+d4d7c902
2.1.0-116.module_el8.10.0+4293+d4d7c902
rubygem-minitest
AlmaLinux:8
From an advisory covering 2 CVEs
 before 5.10.3-116.module_el8.10.0+4294+1072b022
5.10.3-116.module_el8.10.0+4294+1072b022
rubygem-mongo
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.1-3.module_el8.10.0+4294+1072b022
2.5.1-3.module_el8.10.0+4294+1072b022
rubygem-mongo-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.1-3.module_el8.10.0+4294+1072b022
2.5.1-3.module_el8.10.0+4294+1072b022
rubygem-mysql2
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.4.10-4.module_el8.5.0+259+8cec6917
0.4.10-4.module_el8.5.0+259+8cec6917
rubygem-mysql2
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.4.10-4.module_el8.5.0+2625+ec418553
0.4.10-4.module_el8.5.0+2625+ec418553
rubygem-mysql2
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.4.10-4.module_el8.6.0+3170+4b08f9d4
0.4.10-4.module_el8.6.0+3170+4b08f9d4
rubygem-mysql2-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.4.10-4.module_el8.5.0+2625+ec418553
0.4.10-4.module_el8.5.0+2625+ec418553
rubygem-net-telnet
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.1.1-116.module_el8.10.0+4294+1072b022
0.1.1-116.module_el8.10.0+4294+1072b022
rubygem-openssl
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.1.2-116.module_el8.10.0+4294+1072b022
2.1.2-116.module_el8.10.0+4294+1072b022
rubygem-openssl
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.1.2-116.module_el8.10.0+4293+d4d7c902
2.1.2-116.module_el8.10.0+4293+d4d7c902
rubygem-pg
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.0.0-3.module_el8.9.0+3635+c6f99506
1.0.0-3.module_el8.9.0+3635+c6f99506
rubygem-pg-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.0.0-3.module_el8.9.0+3635+c6f99506
1.0.0-3.module_el8.9.0+3635+c6f99506
rubygem-power_assert
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.1.1-116.module_el8.10.0+4294+1072b022
1.1.1-116.module_el8.10.0+4294+1072b022
rubygem-psych
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.0.2-116.module_el8.10.0+4294+1072b022
3.0.2-116.module_el8.10.0+4294+1072b022
rubygem-psych
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.0.2-116.module_el8.10.0+4293+d4d7c902
3.0.2-116.module_el8.10.0+4293+d4d7c902
rubygem-rake
AlmaLinux:8
From an advisory covering 2 CVEs
 before 12.3.3-116.module_el8.10.0+4294+1072b022
12.3.3-116.module_el8.10.0+4294+1072b022
rubygem-rdoc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 6.0.1.1-116.module_el8.10.0+4293+d4d7c902
6.0.1.1-116.module_el8.10.0+4293+d4d7c902
rubygem-test-unit
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.2.7-116.module_el8.10.0+4293+d4d7c902
3.2.7-116.module_el8.10.0+4293+d4d7c902
rubygem-xmlrpc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.3.0-116.module_el8.10.0+4293+d4d7c902
0.3.0-116.module_el8.10.0+4293+d4d7c902
rubygems
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.7.6.3-116.module_el8.10.0+4294+1072b022
2.7.6.3-116.module_el8.10.0+4294+1072b022
rubygems-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.7.6.3-116.module_el8.10.0+4293+d4d7c902
2.7.6.3-116.module_el8.10.0+4293+d4d7c902
ruby-mongo
Debian:12
 All versions, plus listed versions
2.21.3-12.23.0-12.24.0-12.24.1-12.25.0-1
Show 4 moreShow less
2.26.0-12.5.1-1.12.5.1-1.22.5.1-2
 None known
ruby-mongo
Debian:13
 All versions, plus listed versions
2.21.3-12.23.0-12.24.0-12.24.1-12.25.0-12.26.0-12.5.1-2
 None known
ruby-mongo
Debian:14
 before 2.26.0-1, plus listed versions
2.21.3-12.23.0-12.24.0-12.24.1-12.25.0-12.5.1-2
2.26.0-1
ruby
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-116.module+el8.10.0+24853+52b5af56
0:2.5.9-116.module+el8.10.0+24853+52b5af56
ruby-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-116.module+el8.10.0+24853+52b5af56
0:2.5.9-116.module+el8.10.0+24853+52b5af56
ruby-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-116.module+el8.10.0+24853+52b5af56
0:2.5.9-116.module+el8.10.0+24853+52b5af56
ruby-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-116.module+el8.10.0+24853+52b5af56
0:2.5.9-116.module+el8.10.0+24853+52b5af56
ruby-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-116.module+el8.10.0+24853+52b5af56
0:2.5.9-116.module+el8.10.0+24853+52b5af56
ruby-irb
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-116.module+el8.10.0+24853+52b5af56
0:2.5.9-116.module+el8.10.0+24853+52b5af56
ruby-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-116.module+el8.10.0+24853+52b5af56
0:2.5.9-116.module+el8.10.0+24853+52b5af56
ruby-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-116.module+el8.10.0+24853+52b5af56
0:2.5.9-116.module+el8.10.0+24853+52b5af56
rubygem-abrt
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.3.0-4.module+el8.10.0+22021+135c76a8
0:0.3.0-4.module+el8.10.0+22021+135c76a8
rubygem-abrt-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.3.0-4.module+el8.10.0+22021+135c76a8
0:0.3.0-4.module+el8.10.0+22021+135c76a8
rubygem-bigdecimal
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.3.4-116.module+el8.10.0+24853+52b5af56
0:1.3.4-116.module+el8.10.0+24853+52b5af56
rubygem-bigdecimal-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.3.4-116.module+el8.10.0+24853+52b5af56
0:1.3.4-116.module+el8.10.0+24853+52b5af56
rubygem-bson
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.3.0-2.module+el8.9.0+19193+435404ae
0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bson-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.3.0-2.module+el8.9.0+19193+435404ae
0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bson-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.3.0-2.module+el8.9.0+19193+435404ae
0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bson-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.3.0-2.module+el8.9.0+19193+435404ae
0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bundler
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.16.1-5.module+el8.10.0+23088+750dc6ca
0:1.16.1-5.module+el8.10.0+23088+750dc6ca
rubygem-bundler-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.16.1-5.module+el8.10.0+23088+750dc6ca
0:1.16.1-5.module+el8.10.0+23088+750dc6ca
rubygem-did_you_mean
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.2.0-116.module+el8.10.0+24853+52b5af56
0:1.2.0-116.module+el8.10.0+24853+52b5af56
rubygem-io-console
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.4.6-116.module+el8.10.0+24853+52b5af56
0:0.4.6-116.module+el8.10.0+24853+52b5af56
rubygem-io-console-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.4.6-116.module+el8.10.0+24853+52b5af56
0:0.4.6-116.module+el8.10.0+24853+52b5af56
rubygem-json
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.1.0-116.module+el8.10.0+24853+52b5af56
0:2.1.0-116.module+el8.10.0+24853+52b5af56
rubygem-json-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.1.0-116.module+el8.10.0+24853+52b5af56
0:2.1.0-116.module+el8.10.0+24853+52b5af56
rubygem-minitest
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:5.10.3-116.module+el8.10.0+24853+52b5af56
0:5.10.3-116.module+el8.10.0+24853+52b5af56
rubygem-mongo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.1-3.module+el8.10.0+24944+b1921893
0:2.5.1-3.module+el8.10.0+24944+b1921893
rubygem-mongo-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.1-3.module+el8.10.0+24944+b1921893
0:2.5.1-3.module+el8.10.0+24944+b1921893
rubygem-mysql2
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.4.10-4.module+el8.9.0+19193+435404ae
0:0.4.10-4.module+el8.9.0+19193+435404ae
rubygem-mysql2-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.4.10-4.module+el8.9.0+19193+435404ae
0:0.4.10-4.module+el8.9.0+19193+435404ae
rubygem-mysql2-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.4.10-4.module+el8.9.0+19193+435404ae
0:0.4.10-4.module+el8.9.0+19193+435404ae
rubygem-mysql2-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.4.10-4.module+el8.9.0+19193+435404ae
0:0.4.10-4.module+el8.9.0+19193+435404ae
rubygem-net-telnet
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.1.1-116.module+el8.10.0+24853+52b5af56
0:0.1.1-116.module+el8.10.0+24853+52b5af56
rubygem-openssl
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.1.2-116.module+el8.10.0+24853+52b5af56
0:2.1.2-116.module+el8.10.0+24853+52b5af56
rubygem-openssl-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.1.2-116.module+el8.10.0+24853+52b5af56
0:2.1.2-116.module+el8.10.0+24853+52b5af56
rubygem-pg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-3.module+el8.9.0+19193+435404ae
0:1.0.0-3.module+el8.9.0+19193+435404ae
rubygem-pg-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-3.module+el8.9.0+19193+435404ae
0:1.0.0-3.module+el8.9.0+19193+435404ae
rubygem-pg-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-3.module+el8.9.0+19193+435404ae
0:1.0.0-3.module+el8.9.0+19193+435404ae
rubygem-pg-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-3.module+el8.9.0+19193+435404ae
0:1.0.0-3.module+el8.9.0+19193+435404ae
rubygem-power_assert
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.1.1-116.module+el8.10.0+24853+52b5af56
0:1.1.1-116.module+el8.10.0+24853+52b5af56
rubygem-psych
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.0.2-116.module+el8.10.0+24853+52b5af56
0:3.0.2-116.module+el8.10.0+24853+52b5af56
rubygem-psych-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.0.2-116.module+el8.10.0+24853+52b5af56
0:3.0.2-116.module+el8.10.0+24853+52b5af56
rubygem-rake
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:12.3.3-116.module+el8.10.0+24853+52b5af56
0:12.3.3-116.module+el8.10.0+24853+52b5af56
rubygem-rdoc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:6.0.1.1-116.module+el8.10.0+24853+52b5af56
0:6.0.1.1-116.module+el8.10.0+24853+52b5af56
rubygem-test-unit
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.2.7-116.module+el8.10.0+24853+52b5af56
0:3.2.7-116.module+el8.10.0+24853+52b5af56
rubygem-xmlrpc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.3.0-116.module+el8.10.0+24853+52b5af56
0:0.3.0-116.module+el8.10.0+24853+52b5af56
rubygems
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.7.6.3-116.module+el8.10.0+24853+52b5af56
0:2.7.6.3-116.module+el8.10.0+24853+52b5af56
rubygems-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.7.6.3-116.module+el8.10.0+24853+52b5af56
0:2.7.6.3-116.module+el8.10.0+24853+52b5af56
rubygem-abrt
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.3.0-4.module+el8.5.0+738+032c9c02
0:0.3.0-4.module+el8.5.0+738+032c9c02
rubygem-abrt
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.3.0-4.module+el8.9.0+1536+5f79634e
0:0.3.0-4.module+el8.9.0+1536+5f79634e
rubygem-bson
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.3.0-2.module+el8.9.0+1536+5f79634e
0:4.3.0-2.module+el8.9.0+1536+5f79634e
rubygem-bundler
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.16.1-5.module+el8.10.0+1979+815637df
0:1.16.1-5.module+el8.10.0+1979+815637df
rubygem-mysql2
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.4.10-4.module+el8.9.0+1536+5f79634e
0:0.4.10-4.module+el8.9.0+1536+5f79634e
rubygem-pg
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.0.0-3.module+el8.9.0+1536+5f79634e
0:1.0.0-3.module+el8.9.0+1536+5f79634e
ruby-mongo
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.10.0-1
 None known
ruby-mongo
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.4.1-12.4.1-1ubuntu12.5.1-1
 None known
ruby-mongo
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.5.1-1
 None known
ruby-mongo
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.5.1-1ubuntu1
 None known
ruby-mongo
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.5.1-1ubuntu1
 None known
ruby-mongo
Ubuntu:26.10
 All versions, plus listed versions
2.23.0-12.24.0-12.24.1-12.25.0-1
 None known
ruby-mongo
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.5.1-22.23.0-1
 None known

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-88030 is a medium vulnerability (CVSS 6.1) in Mongodb Ruby Driver, published September 10, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.27%, the 18th percentile. Fixed in ruby-mongo 2.26.0-1.

References

Show 16 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open