70,000+ MongoDB Servers Vulnerable to MongoBleed Exploit

Cybersecuritynews •Abinaya • December 30, 2025

A critical vulnerability in MongoDB Server is putting tens of thousands of databases worldwide at risk. Dubbed MongoBleed and tracked as CVE-2025-14847, this high-severity flaw allows unauthenticated attackers to remotely extract sensitive data from server memory without credentials. The Shadow Server Foundation disclosed updated findings showing 74,854 potentially unpatched MongoDB versions among 78,725 exposed instances detected today. Public exploit code […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Over 70,000 MongoDB Servers Exposed to MongoBleed Vulnerability A critical vulnerability known as MongoBleed, tracked as CVE-2025-14847, affects over 74,000 MongoDB servers globally, allowing unauthenticated attackers to extract sensitive data from server memory. The flaw, linked to the zlib message decompression implementation, poses significant risks to exposed instances. The Shadow Server Foundation reported that 74,854 potentially unpatched MongoDB versions were detected among 78,725 exposed instances. 6 sources 33

Extracted Entities

70,000+ MongoDB Servers Vulnerable to MongoBleed Exploit

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)

Vulnerabilities (1)