Critical MongoDB Vulnerability Exposes Sensitive Data via zlib Compression

Critical MongoDB Vulnerability Exposes Sensitive Data via zlib Compression

First seen 24 Dec 2025, 10:59 UTC GbhackersCybersecuritynewsCyberpressAikido.DevWiz 80% similarity 52.3

Article Content

Browse articles
ThreatCluster

A critical vulnerability, tracked as CVE-2025-14847, has been identified in MongoDB's zlib compression implementation, allowing attackers to extract uninitialized heap memory from database servers without authentication. This flaw affects multiple versions of MongoDB and could potentially expose sensitive data stored in uninitialized heap memory.

ThreatCluster AI

Community

Browse all →