References https://ddpoc.com/DVB-2026-10828.html https://www.cnblogs.com/LittleHann/p/6252421.html https://cloud.tencent.com/developer/article/1727227 https://blog.csdn.net/qq_44108455/article/details/107730795 https://www.alibabacloud.com/help/zh/cloud-firewall/cloudfirewall/use-cases/best-practices-to-defend-against-unauthorized-access-to-a-mongodb-database https://comate.baidu.com/zh/page/i03l71rh6ca https://www.cnblogs.com/lzkalislw/p/15991123.html https://developer.aliyun.com/ask/209924 https://help.aliyun.com/zh/cloud-firewall/cloudfirewall/use-cases/best-practices-to-defend-against-unauthorized-access-to-a-mongodb-database https://www.lateresonance.com/index.php/archives/16/
Related VulnerabilitiesPoCMongoDB 存在未授权内存泄露漏洞(CVE-2025-14847)MongoDB Zlib 信息泄露漏洞(CVE-2025-14847)MongoDB MongoDB 解析缺陷漏洞MongoDB Zlib 压缩协议远程未授权堆内存泄露漏洞(CVE-2025-14847)PoCec2-unrestricted-mongodb: Unrestricted MongoDB Access in EC2PoCazure-nsg-mongodb-unrestricted: Unrestricted MongoDB Access in Azure NSGsPoCfile-mongodb-audit-log-disabled: MongoDB Audit Logging DisabledPoCfile-mongodb-auth-disabled: MongoDB Authentication DisabledPoCfile-mongodb-http-interface-enabled: MongoDB HTTP Interface EnabledPoCfile-mongodb-ssl-disabled: MongoDB SSL DisabledPoCmongodb-exporter-metrics: MongoDB Exporter - DetectPoCmongodb-unauth: MongoDB - Unauthenticated Access