Description
未经身份验证的攻击者可利用该漏洞远程读取服务器内存中的敏感数据，无需任何认证即可发起攻击。
MongoDB 存在未授权内存泄露漏洞（CVE-2025-14847）
PoC
https://github.com/ProbiusOfficial/CVE-2025-14847
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://nvd.nist.gov/vuln/detail/CVE-2025-14847
https://mongodb.com/company/blog/news/mongodb-server-security-update-december-2025
https://github.com/onewinner/CVE-2025-14847
https://zhuanlan.zhihu.com/p/1989266261545328748
https://cloud.tencent.com/announce/detail/2191
https://unit42.paloaltonetworks.com/mongobleed-cve-2025-14847/
https://www.wiz.io/blog/mongobleed-cve-2025-14847-exploited-in-the-wild-mongodb
https://avd.aliyun.com/product?prod=mongodb
https://www.cnblogs.com/DSchenzi/p/19434377