Security
MongoBleed Now Exploited - CVE-2025-14847 Alert Worldwide
* Key Takeaways: * MongoBleed (CVE-2025-14847) is an unauthenticated information-leak in MongoDB’s zlib decompression that can return uninitialized heap memory to attackers. * A public proof-of-concept appeared on Dec 26, 2025, and researchers report active exploitation; Censys and Wiz estimate tens of thousands of vulnerable, Internet-exposed instances. * Fixed releases are available for