MongoBleed: pre-auth heap memory leak in MongoDB Server ยท updates https://pwn.watch/i/mongobleed-mongodb-cve-2025-14847 A bug in MongoDB's zlib message decompression let an unauthenticated client read uninitialized heap memory, which can contain credentials, tokens and other data. Public PoCs appeared and CISA confirmed exploitation. Upgrade, or remove zlib from the network compressors and keep MongoDB off the internet. en Mon, 29 Dec 2025 00:00:00 GMT MongoBleed: pre-auth heap memory leak in MongoDB Server: Details posted to oss-security https://pwn.watch/i/mongobleed-mongodb-cve-2025-14847 https://pwn.watch/i/mongobleed-mongodb-cve-2025-14847#2025-12-29-693e1770 Mon, 29 Dec 2025 00:00:00 GMT high <p><a href="https://www.openwall.com/lists/oss-security/2025/12/29/21">Source</a></p> MongoBleed: pre-auth heap memory leak in MongoDB Server: CISA adds CVE-2025-14847 to KEV (due 2026-01-19) https://pwn.watch/i/mongobleed-mongodb-cve-2025-14847 https://pwn.watch/i/mongobleed-mongodb-cve-2025-14847#2025-12-29-882d546c Mon, 29 Dec 2025 00:00:00 GMT high <p>MongoBleed: pre-auth heap memory leak in MongoDB Server: CISA adds CVE-2025-14847 to KEV (due 2026-01-19)</p> MongoBleed: pre-auth heap memory leak in MongoDB Server: MongoBleed disclosed; fixed builds available https://pwn.watch/i/mongobleed-mongodb-cve-2025-14847 https://pwn.watch/i/mongobleed-mongodb-cve-2025-14847#2025-12-19-4b4be500 Fri, 19 Dec 2025 00:00:00 GMT high <p><a href="https://www.cyber.gc.ca/en/alerts-advisories/al25-021-vulnerability-affecting-mongodb-cve-2025-14847">Source</a></p>