GLOBAL SITUATIONMONITORING
517 published briefsUTCMon, Apr 20 14:30:58
MongoBleed
Memory disclosure flaw in MongoDB compression handlers enabling heap data exfiltration from vulnerable servers
1 intelligence brief← Intelligence Hub
-
MongoDB MongoBleed CVE-2025-14847: Unauthenticated Memory Leak Under Active Exploitation
A critical pre-authentication memory disclosure vulnerability in MongoDB allows attackers to leak heap memory without credentials. With 87,000+ vulnerable instances globally and active exploitation confirmed, CISA has mandated patches for Federal agencies by January 19, 2026.