Description
MongoDB 未授权访问漏洞指的就是 MongoDB 在使用过程中没有正确设置数据库的访问权限，导致数据库被非授权用户访问并对数据库数据进行增删改等高危操作。MongoDB 数据库弱口令漏洞危害严重，可以导致数据库数据泄露或被删除勒索，从而造成严重的生产事故。
MongoDB 未授权访问漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://help.aliyun.com/zh/cloud-firewall/cloudfirewall/use-cases/best-practices-to-defend-against-unauthorized-access-to-a-mongodb-database
https://brands.cnblogs.com/tencentcloud/p/10110
https://learnku.com/articles/328/alert-mongodb-unauthorized-access-vulnerability
https://github.com/SexyBeast233/SecBooks/blob/main/%E3%80%90%E5%85%AC%E4%BC%97%E5%8F%B7%E6%96%87%E7%AB%A0%E3%80%91bugs/%E4%BB%8E%E9%9B%B6%E5%BC%80%E5%A7%8B%E5%AD%A6%E4%B9%A0%E5%90%84%E7%A7%8D%E5%B8%B8%E8%A7%81%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE%E6%BC%8F%E6%B4%9E.md
https://cloud.tencent.com/developer/article/1727227
https://zhuanlan.zhihu.com/p/24142015
https://ask.csdn.net/questions/8517165
https://www.pa55w0rd.online/unauthorized-access-sumup/
https://qkl.seebug.org/vuldb/ssvid-88997
https://developer.aliyun.com/article/1326527
https://www.sohu.com/a/584663756_121124375
https://www.cnblogs.com/ada-tina/articles/_mongodb.html
https://comate.baidu.com/zh/page/i03l71rh6ca
https://www.bilibili.com/read/cv16802957/
https://juejin.cn/post/6950953359452930084
https://potato.gold/data/uploads/pdf/%E6%9D%82%E9%A1%B9Pdf/99-web%E6%BC%8F%E6%B4%9E%E6%8C%96%E6%8E%98%E4%B9%8B%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE%E6%BC%8F%E6%B4%9E.pdf
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/Mongo%20DB/Mongo%20DB%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/
https://www.mongodb.com/resources/products/alerts
https://www.alibabacloud.com/help/en/cloud-firewall/cloudfirewall/use-cases/best-practices-to-defend-against-unauthorized-access-to-a-mongodb-database
https://op-c.net/blog/mongodb-security-breach-exposing-customer-data/
https://unit42.paloaltonetworks.com/mongobleed-cve-2025-14847/
https://nvd.nist.gov/vuln/detail/CVE-2025-14847
https://www.ox.security/blog/attackers-could-exploit-zlib-to-exfiltrate-data-cve-2025-14847/
https://www.wiz.io/blog/mongobleed-cve-2025-14847-exploited-in-the-wild-mongodb
https://censys.com/advisory/cve-2025-14847/
https://smartdeploy.pdq.com/hc/en-us/articles/44891533417371-How-to-remediate-CVE-2025-14847-for-MongoDB-and-SmartDeploy
https://www.cve.org/CVERecord?id=CVE-2025-14847