MongoBleed (CVE-2025-14847): the US, China, and the EU are among the top exploited GEOs

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MongoBleed (CVE-2025-14847) Exploits Unpatched MongoDB Servers CVE-2025-14847, known as MongoBleed, allows attackers to remotely leak memory from unpatched MongoDB servers using zlib compression without authentication. This critical vulnerability was disclosed shortly after Christmas 2025, affecting MongoDB Server deployments that utilize zlib network compression, with the U.S., China, and the EU among the most exploited regions. 2 sources 37