Infoq MongoBleed Vulnerability Exposes MongoDB Data to Attackers
Article Content
Browse articles 
MongoDB has patched CVE-2025-14847, a vulnerability that affects multiple versions of MongoDB Server. The flaw allows unauthenticated attackers to remotely exploit the vulnerability with low complexity, potentially leading to the exfiltration of sensitive data and credentials. The vulnerability has been dubbed 'MongoBleed' in reference to the infamous Heartbleed bug.
Ask AI about this cluster
Answers cite the sources they use
Updated 227d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track CVE-2025-14847 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
PHP2Shell: Critical RCE Vulnerabilities Prompt Emergency Patches Two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were disclosed on October 21, 2026, allowing unauthenticated remote code execution (RCE). The vulnerabilities, collectively known as PHP2Shell, affect all PHP installations serving web requests, including popular platforms like… 
PHP Vulnerabilities Force Global Website Shutdowns Amid Cyber Attack Surge A critical vulnerability in the PHP programming language, which powers about 70% of websites, has led to the emergency shutdown of 32 UK government services and numerous other sites worldwide. Discovered by researchers using AI tools, the vulnerabilities could allow attackers to execute remote code, posing a severe…