Back Redhotcyber

Critical MongoDB Vulnerability Exposed: CVE-2025-14847

Redhotcyber • December 23, 2025

Share: View original

Discover the critical MongoDB vulnerability CVE-2025-14847, allowing attackers to extract sensitive data. Learn how to protect your database now.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Remote Code Execution Vulnerability in MongoDB (CVE-2025-14847) MongoDB has addressed a critical vulnerability, CVE-2025-14847, that allows unauthenticated remote attackers to execute arbitrary code on vulnerable servers. The flaw, with a CVSS score of 8.7, is linked to the server's zlib implementation. Organizations using affected MongoDB versions are advised to implement the patch to secure their databases. 39 sources 56

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)