Critical RCE Vulnerability Discovered in MongoDB

Critical RCE Vulnerability Discovered in MongoDB

First seen 26 Dec 2025, 22:14 UTC •BleepingcomputerHeise.DeCsoonlineCybersecuritynews •76% similarity •45.3

Article Content

Browse articles
ThreatCluster

MongoDB has identified a critical security vulnerability, tracked as CVE-2025-14847, that allows unauthenticated users to access uninitialized heap memory, potentially leading to remote code execution (RCE). This flaw affects multiple versions of MongoDB and MongoDB Server, and administrators are urged to apply patches immediately to mitigate risks associated with this vulnerability.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →