Actively exploited vulnerabilities affecting MongoDB products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2025-14847https://wildfortech.com/security#CVE-2025-14847MongoDB Server mishandles length parameters in Zlib-compressed protocol headers, allowing an unauthenticated remote client to read uninitialized heap memory. This is significant because no authentication is required to trigger the flaw, meaning any network-accessible MongoDB instance could leak sensitive memory contents to an attacker. Heap memory exposure can reveal credentials, query data, or internal state, potentially enabling further attacks or data breaches.Mon, 29 Dec 2025 00:00:00 GMTMongoDBMongoDB and MongoDB Server