MongoDB
In 8 briefs, most recently 3 February 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
2 MongoDB vulnerabilities are on CISA's list of vulnerabilities exploited in the wild. Most recent:
- CVE-2025-14847 MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability
- CVE-2019-10758 MongoDB mongo-express Remote Code Execution Vulnerability
Coverage in DanSec Daily
- Lotus Blossom hijacks Notepad++ update channel, Panera Bread breach exposes 5.1M accounts, and 341 malicious OpenClaw AI skills found.
- Supply chain attacks hit eScan antivirus updates and Open VSX Registry (GlassWorm), plus automated MongoDB data extortion campaigns.
- Brightspeed breach claimed by Crimson Collective, Zestix stealing data from ShareFile, Nextcloud and OwnCloud, and critical n8n and MongoDB flaws.
- ESA confirms breach of external servers, Korean Air data theft tied to Oracle EBS hack, and BlackCat ransomware pleas by ex-Sygnia and DigitalMint staff.
- Coupang's $1.17B breach compensation, Aflac's 22M-person data breach and the actively exploited MongoBleed MongoDB flaw.
- Alleged WIRED subscriber data leak from Condé Nast, Ubisoft Rainbow Six Siege internal system abuse, and actively exploited MongoDB MongoBleed flaw …
- Ubisoft Rainbow Six Siege breach let attackers ban players and grant billions of in-game credits; MongoDB flaw CVE-2025-14847 exposes heap memory.
- FBI seizes web3adspanels.org credential-hosting domain, La Poste DDoS, SEC charges in $14M AI crypto scam, MongoDB RCE patch urged.