Hack Forums
MongoDB CVE-2025-14847 - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: White Hat Hacking (https://hackforums.net/forumdisplay.php?fid=400)
+---- Thread: MongoDB CVE-2025-14847 (/showthread.php?tid=6316741)



MongoDB CVE-2025-14847 - php - Dec 29, 2025

MongoDB servers are under active exploitation via CVE-2025-14847, a pre-auth memory leak.

Censys found 87,000 exposed instances. The default zlib compression flaw can leak passwords and API keys over time.


RE: MongoDB CVE-2025-14847 - Null State - Jan 5, 2026

This is the exploit that got dropped on Christmas right? That shit was hilariously devious to drop on Christmas day of all days.