Vendors / MongoDB

MongoDB vulnerabilities being exploited

1 MongoDB flaw was confirmed exploited in the wild in the past 365 days, across 1 product: MongoDB and MongoDB Server. If you run any of them, patch these first.

Added	Exploited vulnerability	Fix by
2025-12-29	CVE-2025-14847 MongoDB and MongoDB Server MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib compressed protocol headers. This vulnerability may allow a read of uninitialized heap memory by an unauthenticated client.	2026-01-19

Watch my MongoDB software Scan a website All vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.