High-severity MongoDB flaw CVE-2025

Securityaffairs.Co •Pierluigi Paganini • December 25, 2025

MongoDB addressed a high-severity vulnerability that can be exploited to achieve remote code execution on vulnerable servers. MongoDB addressed a high-severity vulnerability, tracked as CVE-2025-14847 (CVSS score 8.7), an unauthenticated, remote attacker can exploit the issue to execute arbitrary code on vulnerable servers. “An client-side exploit of the Server’s zlib implementation can return uninitialized heap […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Remote Code Execution Vulnerability in MongoDB (CVE-2025-14847) MongoDB has addressed a critical vulnerability, CVE-2025-14847, that allows unauthenticated remote attackers to execute arbitrary code on vulnerable servers. The flaw, with a CVSS score of 8.7, is linked to the server's zlib implementation. Organizations using affected MongoDB versions are advised to implement the patch to secure their databases. 39 sources 56

Extracted Entities

CVEs (1)

CVE-2025-14847

Platforms (1)

MongoDB