---
id: 6924
title: "MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know"
cve: CVE-2025-14847
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/mongobleed-cve-2025-14847-exploited-in-the-wild-mongodb"
published_at: "2025-12-28T09:24:54Z"
tags: ["cloud", "memory-safety", "information-disclosure", "vulnerability", "patching", "mongodb", "cve-2025-14847", "mongobleed"]
phying_url: "https://phying.com/item/6924"
lang: en
---

# MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know

## Summary

MongoBleed (CVE-2025-14847): a pre-auth zlib flaw leaks heap memory from unpatched MongoDB; Wiz finds vulnerable versions in 42% of cloud environments; exploitation is live in the wild.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2025-14847
- **Published:** 2025-12-28T09:24:54Z
- **Original:** https://www.wiz.io/blog/mongobleed-cve-2025-14847-exploited-in-the-wild-mongodb
- **Phying News:** https://phying.com/item/6924