GLOBAL SITUATIONMONITORING
517 published briefsUTCThu, Nov 12 09:35:14
MongoBleed
Memory disclosure flaw in MongoDB compression handlers enabling heap data exfiltration from vulnerable servers
1 intelligence brief← Intelligence Hub
-
MongoDB MongoBleed CVE-2025-14847: Unauthenticated Memory Leak Under Active Exploitation
A critical pre-authentication memory disclosure vulnerability in MongoDB allows attackers to leak heap memory without credentials. With 87,000+ vulnerable instances globally and active exploitation confirmed, CISA has mandated patches for Federal agencies by January 19, 2026.