MongoBleed
Security incidents tagged MongoBleed. Newest first.
1 MongoBleed incident in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 307
- Longest quiet run: 297 days (Dec 30–Oct 22)
Show 1 older incident1 older incident
December 2025 1
HighMongoBleed: pre-auth heap memory leak in MongoDB ServerPatched
MongoDB Server Patched
A bug in MongoDB's zlib message decompression let an unauthenticated client read uninitialized heap memory, which can contain credentials, tokens and other data. Public PoCs appeared and CISA confirmed exploitation. Upgrade, or remove zlib from the network compressors and keep MongoDB off the internet.
Open incident →CVE-2025-14847
