References https://github.com/onewinner/CVE-2025-14847 https://zhuanlan.zhihu.com/p/1989266261545328748 https://cloud.tencent.com/developer/article/2612749 https://www.cnblogs.com/DSchenzi/p/19434377 https://cloud.tencent.com/announce/detail/2191 https://nvd.nist.gov/vuln/detail/CVE-2025-14847 https://unit42.paloaltonetworks.com/mongobleed-cve-2025-14847/ https://mongodb.com/company/blog/news/mongodb-server-security-update-december-2025 https://www.wiz.io/blog/mongobleed-cve-2025-14847-exploited-in-the-wild-mongodb https://www.aikido.dev/blog/mongobleed-mongodb-zlib-vulnerability-cve-2025-14847 https://www.smartkeyss.com/post/mongobleed-pre-auth-memory-disclosure-via-op_compressed-in-mongodb-cve-2025-14847 https://github.com/joe-desimone/mongobleed
Related VulnerabilitiesmongoDB 存在默认口令漏洞PoCMongoDB 存在未授权内存泄露漏洞(CVE-2025-14847)MongoDB Zlib 信息泄露漏洞(CVE-2025-14847)MongoDB MongoDB 解析缺陷漏洞PoCec2-unrestricted-mongodb: Unrestricted MongoDB Access in EC2PoCazure-nsg-mongodb-unrestricted: Unrestricted MongoDB Access in Azure NSGsPoCfile-mongodb-audit-log-disabled: MongoDB Audit Logging DisabledPoCfile-mongodb-auth-disabled: MongoDB Authentication DisabledPoCfile-mongodb-http-interface-enabled: MongoDB HTTP Interface EnabledPoCfile-mongodb-ssl-disabled: MongoDB SSL DisabledPoCmongodb-exporter-metrics: MongoDB Exporter - DetectPoCmongodb-unauth: MongoDB - Unauthenticated Access