87,000+ MongoDB Instances Vulnerable to MongoBleed Flaw Exposed Online

Cybersecuritynews •Guru Baran • December 28, 2025

A high-severity vulnerability in MongoDB Server that allows unauthenticated remote attackers to siphon sensitive data from database memory. Dubbed “MongoBleed” due to its automated similarities to the infamous Heartbleed bug, the flaw tracks as CVE-2025-14847 and carries a CVSS score of 7.5. The vulnerability resides in the MongoDB Server’s zlib message decompression implementation. According to […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Over 70,000 MongoDB Servers Exposed to MongoBleed Vulnerability A critical vulnerability known as MongoBleed, tracked as CVE-2025-14847, affects over 74,000 MongoDB servers globally, allowing unauthenticated attackers to extract sensitive data from server memory. The flaw, linked to the zlib message decompression implementation, poses significant risks to exposed instances. The Shadow Server Foundation reported that 74,854 potentially unpatched MongoDB versions were detected among 78,725 exposed instances. 6 sources 33

Extracted Entities

87,000+ MongoDB Instances Vulnerable to MongoBleed Flaw Exposed Online

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)

Vulnerabilities (2)