MongoBleed (CVE-2025-14847): the US, China, and the EU are among the top exploited GEOs

Securityaffairs.Co •Pierluigi Paganini • December 31, 2025

MongoBleed (CVE-2025-14847) lets attackers remotely leak memory from unpatched MongoDB servers using zlib compression, without authentication. A critical vulnerability, CVE-2025-14847 (MongoBleed), was disclosed right after Christmas, an unwelcome “gift” for the cybersecurity community, impacting MongoDB Server deployments that use zlib network compression. MongoDB is a popular open-source NoSQL database used to store and manage data […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MongoBleed (CVE-2025-14847) Exploits Unpatched MongoDB Servers CVE-2025-14847, known as MongoBleed, allows attackers to remotely leak memory from unpatched MongoDB servers using zlib compression without authentication. This critical vulnerability was disclosed shortly after Christmas 2025, affecting MongoDB Server deployments that utilize zlib network compression, with the U.S., China, and the EU among the most exploited regions. 2 sources 37

Extracted Entities

MongoBleed (CVE-2025-14847): the US, China, and the EU are among the top exploited GEOs

The full story

Extracted Entities

Attack Types (1)

Countries (1)

CVEs (1)

Platforms (1)

Vulnerabilities (1)