Critical MongoDB Vulnerability Exposes Sensitive Data via Zlib Compression

Cybersecuritynews •Abinaya • December 24, 2025

A critical security vulnerability, tracked as CVE-2025-14847, that could allow attackers to extract uninitialized heap memory from database servers without authentication. The flaw resides in MongoDB’s zlib compression implementation and affects multiple versions of the database platform. The vulnerability enables client-side exploitation of the MongoDB Server’s zlib implementation. Potentially exposing sensitive data stored in uninitialized heap […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical MongoDB Vulnerability Exposes Sensitive Data via zlib Compression A critical vulnerability, tracked as CVE-2025-14847, has been identified in MongoDB's zlib compression implementation, allowing attackers to extract uninitialized heap memory from database servers without authentication. This flaw affects multiple versions of MongoDB and could potentially expose sensitive data stored in uninitialized heap memory. 6 sources 52

Extracted Entities

Critical MongoDB Vulnerability Exposes Sensitive Data via Zlib Compression

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)