CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

MongoBleed Vulnerability Actively Exploited in the Wild

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

A newly disclosed security vulnerability in MongoDB, codenamed MongoBleed (CVE-2025-14847), is being actively exploited in the wild. The flaw allows unauthenticated attackers to remotely leak sensitive data from MongoDB server memory. Over 87,000 potentially susceptible instances have been identified globally, with a majority located in the U.S., China, Germany, India, and France. Users are advised to update to the latest versions of MongoDB to mitigate the risk. The vulnerability has a CVSS score of 8.7 and affects multiple versions of MongoDB. Wiz reported that 42% of cloud environments have at least one instance of MongoDB vulnerable to this flaw.

Timeline

  1. 29.12.2025 15:38 1 articles · 23h ago

    MongoBleed Vulnerability Actively Exploited in the Wild

    A newly disclosed security vulnerability in MongoDB, codenamed MongoBleed (CVE-2025-14847), is being actively exploited in the wild. The flaw allows unauthenticated attackers to remotely leak sensitive data from MongoDB server memory. Over 87,000 potentially susceptible instances have been identified globally, with a majority located in the U.S., China, Germany, India, and France. Users are advised to update to the latest versions of MongoDB to mitigate the risk.

    Show sources
    Open in new tab

Information Snippets