U.S. CISA Adds a Flaw in MongoDB Server to Its Known Exploited Vulnerabilities Catalog

U.S. CISA adds a flaw in MongoDB Server to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a MongoDB Server flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a MongoDB Server vulnerability, tracked as CVE-2025-14847 (CVSS Score of 8.7), to its Known Exploited Vulnerabilities (KEV) catalog. The recently disclosed MongoDB vulnerability CVE-2025-14847 (aka MongoBleed) is being actively exploited, wit…

MongoDB stock slides as “MongoBleed” exploitation warning puts database security in focus

NEW YORK, December 29, 2025, 15:18 ET — Regular session MongoDB Inc (MDB) shares were down about 2.2% at $426.35 in afternoon trading on Monday, after swinging between $421.11 and $435.80 earlier in the session. The decline put a spotlight on a cyber risk that can matter quickly for database providers: patching cadence. When a vulnerability can be exploited without a login, security teams often move to lock down internet exposure before they do …

Threat Actors Exploiting Critical ‘MongoBleed’ MongoDB Flaw

A high-severity flaw in MongoDB instances could allow unauthenticated remote bad actors to leak sensitive data from MongoDB servers. Dubbed "MongoBleed," the security flaw is being exploited in the wild after a PoC exploit and technical details were published. MongoDB has released patches to protect against exploitation. The post Threat Actors Exploiting Critical ‘MongoBleed’ MongoDB Flaw appeared first on Security Boulevard.

AL25-021 - Vulnerability affecting MongoDB - CVE-2025-14847

Open the article to view the coverage from Malware Analysis, News and Indicators

Critical 'MongoBleed' Flaw Exploited In The Wild To Leak Database Secrets

The cybersecurity world is facing a "Heartbleed" moment for the NoSQL era. A critical vulnerability in MongoDB, the world’s most popular non-relational database, is being actively exploited in the wild, allowing unauthenticated attackers to "bleed" sensitive memory directly from server processes. Dubbed "MongoBleed" and tracked as CVE-2025-14847, the flaw represents a catastrophic breakdown in how MongoDB handles compressed data. According to re…