MongoBleed flaw actively exploited in attacks in the wild

Securityaffairs • December 29, 2025

Share: View original

A recently disclosed MongoDB flaw (MongoBleed) is under active exploitation, with over 87000 potentially vulnerable instances online.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MongoBleed Vulnerability Exploited in the Wild The MongoBleed vulnerability, tracked as CVE-2025-14847 with a CVSS score of 8.7, is currently under active exploitation. Over 87,000 potentially vulnerable MongoDB instances have been identified worldwide, posing a significant risk to affected systems. Cybersecurity researcher Joe Desimone has published a proof-of-concept exploit for this flaw. 2 sources 64

Extracted Entities

Platforms (1)

Vulnerabilities (1)