Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor. Enroll Now and Save 10%: Coupon Code MWNEWS10 Note: Affiliate link – your enrollment helps support this platform at no extra cost to you. Cyble Vulnerability Intelligence researchers tracked 1,782 vulnerabilities in the last week, the third straight week that new vulnerabilities have been growing at twice their long-term rate. Over 282 of the...

A high-severity vulnerability, CVE-2025-14847, affecting MongoDB Server, “MongoBleed,” is being actively exploited. Read more for technical details & impact.

Python DB API 2.0 (PEP 249) client for MongoDB

What is the Vulnerability?A critical vulnerability in MongoDB Server’s handling of zlib-compressed network traffic allows a fully unauthenticated r...

A company is looking for a Back End Node.JS Developer (Remote). Key Responsibilities Design, optimize, and maintain Node.js microservices fo

With the world of education shifting online, platforms that combine structured learning with smart,...

CISA ordered U.S. federal agencies to patch an actively exploited MongoDB vulnerability (MongoBleed) that can be exploited to steal credentials, API keys, and other sensitive data.

Jonathan Greig reports: U.S. and Australian cyber agencies confirmed that hackers are exploiting a vulnerability that emerged over the Christmas holiday and is impacting data storage systems from the company MongoDB. The issue drew concern on December 25 when a prominent researcher published exploit code for CVE-2025-14847 — a vulnerability MongoDB announced on December 15 and patched on December… Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off ...

MongoDB programmatūrā ir konstatēta augsta riska ievainojamība “MongoBleed”. Ievainojamība CVE-2025-14847 ar CVSS novērtējumu 8,7 ļauj uzbrucējam izmantot kļūdainu Zlib ziņu dekompresijas protokola loģiku, lai nolasītu neinicializētus atmiņas apgabalus.

Уязвимость MongoBleed позволяет вытаскивать чувствительные данные из MongoDB, и волна сканирования уже идет.

The following is an update on the security vulnerability identified in December 2025.

On December 19, 2025, MongoDB issued an advisory for CVE-2025-14847, known as “MongoBleed,” a high-severity vulnerability in the server’s zlib-based network compression functionality. This vulnerability affects how the database handles compressed network communications and can cause it to accidentally leak sensitive information from its memory when abused by unauthenticated threat actors. The problem occurs when MongoDB receives a specially-crafted message. Instead … CVE-2025-14847: MongoBleed...