Critical Remote Code Execution Vulnerability in MongoDB (CVE-2025-14847)

Critical Remote Code Execution Vulnerability in MongoDB (CVE-2025-14847)

First seen 25 Dec 2025, 12:06 UTC RedhotcyberSecurityaffairs.CoSecurityaffairsHeise.DeCybersecuritynews+20 70% similarity 55.8

Article Content

Browse articles
ThreatCluster

MongoDB has addressed a critical vulnerability, CVE-2025-14847, that allows unauthenticated remote attackers to execute arbitrary code on vulnerable servers. The flaw, with a CVSS score of 8.7, is linked to the server's zlib implementation. Organizations using affected MongoDB versions are advised to implement the patch to secure their databases.

ThreatCluster AI

Community

Browse all →