On December 12, 2025, the MongoDB Security Engineering team disclosed a high-severity vulnerability in MongoDB that allows unauthenticated memory disclosure. The issue is tracked as CVE-2025-14847 and has a CVSS score of 8.7 and was quickly nicknamed MongoBleed in the security community due to the way it exposes server memory. Technical Details MongoDB uses a”¦
First seen on securityboulevard.com
Jump to article: securityboulevard.com/2026/01/mongobleed-unauthenticated-memory-disclosure-in-mongodb-cve-2025-14847/
