Aikido.Dev

Critical MongoDB Vulnerability Exposes Sensitive Data via zlib Compression

First seen 24 Dec 2025, 10:59 UTC • Gbhackers

•52.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A critical vulnerability, tracked as CVE-2025-14847, has been identified in MongoDB's zlib compression implementation, allowing attackers to extract uninitialized heap memory from database servers without authentication. This flaw affects multiple versions of MongoDB and could potentially expose sensitive data stored in uninitialized heap memory.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Attack Flow

Continue Reading

Critical Ruflo Vulnerability Allows Full Control of AI Agent Platforms Critical PostgreSQL Vulnerability Exposes Databases to Remote Code Execution AWS Strands Agents Tools Exposed to Multiple CVEs in 23 Days Mass Exploitation of Gravity SMTP Plugin Vulnerability CVE-2026-4020 Critical Vulnerability in free5GC Exposes 5G Core Network to Attacks Critical MongoDB Vulnerability Allows Arbitrary Code Execution

Critical MongoDB Vulnerability Exposes Sensitive Data via zlib Compression

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading