Skip to content
Critical MongoDB Vulnerability Exposes Sensitive Data via zlib Compression

Critical MongoDB Vulnerability Exposes Sensitive Data via zlib Compression

First seen 24 Dec 2025, 10:59 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A critical vulnerability, tracked as CVE-2025-14847, has been identified in MongoDB's zlib compression implementation, allowing attackers to extract uninitialized heap memory from database servers without authentication. This flaw affects multiple versions of MongoDB and could potentially expose sensitive data stored in uninitialized heap memory.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 227d ago How this analysis works

More articles in this cluster (6)

Following this threat?

Track CVE-2025-14847 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed