CVE-2025-14847
In 3 briefs, most recently 30 December 2025. RSS for this tag
Published 2025-12-19
Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗
Known exploited (CISA KEV)
MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability.
Added 2025-12-29
Coverage in DanSec Daily
- Coupang's $1.17B breach compensation, Aflac's 22M-person data breach and the actively exploited MongoBleed MongoDB flaw.
- Alleged WIRED subscriber data leak from Condé Nast, Ubisoft Rainbow Six Siege internal system abuse, and actively exploited MongoDB MongoBleed flaw …
- Ubisoft Rainbow Six Siege breach let attackers ban players and grant billions of in-game credits; MongoDB flaw CVE-2025-14847 exposes heap memory.