Exploited MongoBleed flaw leaks MongoDB secrets, 87K servers exposed

A severe vulnerability affecting multiple MongoDB versions, dubbed MongoBleed (CVE-2025-14847), is being actively exploited ...
Security Boulevard

Threat Actors Exploiting Critical ‘MongoBleed’ MongoDB Flaw

A high-severity flaw in MongoDB instances could allow unauthenticated remote bad actors to leak sensitive data from MongoDB servers. Dubbed "MongoBleed," the security flaw is being exploited in the ...

"MongoBleed": Exploit for critical vulnerability in MongoDB makes attacks easier

Those responsible for a MongoDB instance cannot rest easy: an exploit for a critical vulnerability makes upgrades even more ...
GitHub

YangY-Xiao/exploit-database

This is the official repository of The Exploit Database, a project sponsored by Offensive Security. The Exploit Database is an archive of public exploits and corresponding vulnerable software, ...
GitHub

Mercedes-Joy/exploit-database

This is the official repository of The Exploit Database, a project sponsored by Offensive Security. The Exploit Database is an archive of public exploits and corresponding vulnerable software, ...
Cybernews

Christmas gift: method to exploit MongoBleed vulnerability leaking MongoDB secrets showcased on web

Weirdly, a public exploit and technical details are available online, showing how attackers can trigger the vulnerability and remotely extract secrets, credentials, and other sensitive data.

A Critical MongoDB Flaw Leaks Secrets From Tens of Thousands of Servers

A newly disclosed security flaw in MongoDB leading to the exposure of over 87,000 potentially vulnerable servers on the ...
IEEE

Vulnerability and Exploit Database Management

Abstract: Vulnerability and exploit databases play a fundamental role in the conversation surrounding vulnerability management. This chapter discusses some of the most notable examples, as well as ...