{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T21:29:54.052Z",
  "tag": {
    "id": "mongodb",
    "label": "MongoDB",
    "isStack": false,
    "url": "https://pwn.watch/t/mongodb",
    "feed": "https://pwn.watch/t/mongodb/feed.xml"
  },
  "counts": {
    "incidents": 1,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 1
  },
  "incidents": [
    {
      "slug": "mongobleed-mongodb-cve-2025-14847",
      "title": "MongoBleed: pre-auth heap memory leak in MongoDB Server",
      "url": "https://pwn.watch/i/mongobleed-mongodb-cve-2025-14847",
      "json": "https://pwn.watch/i/mongobleed-mongodb-cve-2025-14847.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "MongoDB Server",
      "tags": [
        "mongobleed",
        "mongodb",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-14847"
      ],
      "affectedVersions": [
        "MongoDB Server versions before the fixed releases (see vendor advisory)"
      ],
      "fixedVersions": [
        "8.2.3",
        "8.0.17",
        "7.0.28",
        "6.0.27",
        "5.0.32",
        "4.4.30"
      ],
      "startedAt": "2025-12-19",
      "closedAt": "2025-12-29",
      "updatedAt": "2025-12-29",
      "summary": "A bug in MongoDB's zlib message decompression let an unauthenticated client read uninitialized heap memory, which can contain credentials, tokens and other data. Public PoCs appeared and CISA confirmed exploitation. Upgrade, or remove zlib from the network compressors and keep MongoDB off the internet.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "mongobleed-mongodb-cve-2025-14847",
      "incidentTitle": "MongoBleed: pre-auth heap memory leak in MongoDB Server",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-12-29",
      "title": "Details posted to oss-security",
      "body": null,
      "sourceUrl": "https://www.openwall.com/lists/oss-security/2025/12/29/21",
      "url": "https://pwn.watch/i/mongobleed-mongodb-cve-2025-14847"
    },
    {
      "incident": "mongobleed-mongodb-cve-2025-14847",
      "incidentTitle": "MongoBleed: pre-auth heap memory leak in MongoDB Server",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-12-29",
      "title": "CISA adds CVE-2025-14847 to KEV (due 2026-01-19)",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/mongobleed-mongodb-cve-2025-14847"
    },
    {
      "incident": "mongobleed-mongodb-cve-2025-14847",
      "incidentTitle": "MongoBleed: pre-auth heap memory leak in MongoDB Server",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-12-19",
      "title": "MongoBleed disclosed; fixed builds available",
      "body": null,
      "sourceUrl": "https://www.cyber.gc.ca/en/alerts-advisories/al25-021-vulnerability-affecting-mongodb-cve-2025-14847",
      "url": "https://pwn.watch/i/mongobleed-mongodb-cve-2025-14847"
    }
  ]
}