References https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/bb16ddf3-5cb3-42fd-bb06-98b1afd51cd1/ https://www.ithome.com.tw/news/173071 https://www.hkcert.org/tc/security-bulletin/mongodb-information-disclosure-vulnerability_20251223 https://cn.t00ls.com/articles-74625.html https://www.mongodb.com/resources/products/alerts https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=12607 https://help.aliyun.com/zh/cloud-firewall/cloudfirewall/use-cases/best-practices-to-defend-against-unauthorized-access-to-a-mongodb-database https://www.infoq.cn/article/HN7NXQZUkbU2StoW9Kl9 https://comate.baidu.com/zh/page/hev1o2brg2j https://www.gm7.org/archives/25613 https://www.dayanzai.me/mongobleed.html https://finance.sina.com.cn/tech/digi/2025-12-28/doc-inheimcw6006674.shtml https://www.hzon.com/securityStudies/safety/86814024640700418.html https://www.akamai.com/zh/blog/security-research/cve-2025-14847-all-you-need-to-know-about-mongobleed https://help.aliyun.com/zh/mongodb/product-overview/cve-2025-14847-vulnerability-risk-and-mitigation https://www.secrss.com/articles/86431 https://www.wiz.io/blog/mongobleed-cve-2025-14847-exploited-in-the-wild-mongodb https://unit42.paloaltonetworks.com/mongobleed-cve-2025-14847/ https://www.akamai.com/blog/security-research/cve-2025-14847-all-you-need-to-know-about-mongobleed https://www.varonis.com/blog/mongobleed-cve-2025-14847-memory-leak-vulnerability
Related VulnerabilitiesmongoDB 存在默认口令漏洞PoCMongoDB 存在未授权内存泄露漏洞(CVE-2025-14847)MongoDB Zlib 信息泄露漏洞(CVE-2025-14847)MongoDB Zlib 压缩协议远程未授权堆内存泄露漏洞(CVE-2025-14847)PoCec2-unrestricted-mongodb: Unrestricted MongoDB Access in EC2PoCazure-nsg-mongodb-unrestricted: Unrestricted MongoDB Access in Azure NSGsPoCfile-mongodb-audit-log-disabled: MongoDB Audit Logging DisabledPoCfile-mongodb-auth-disabled: MongoDB Authentication DisabledPoCfile-mongodb-http-interface-enabled: MongoDB HTTP Interface EnabledPoCfile-mongodb-ssl-disabled: MongoDB SSL DisabledPoCmongodb-exporter-metrics: MongoDB Exporter - DetectPoCmongodb-unauth: MongoDB - Unauthenticated Access