By releasing the code behind its search and vector engine under the SSPL, MongoDB is giving self‑managed users new visibility ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive ordering federal agencies to patch a high-severity MongoDB vulnerability that is being actively ...

IT admins are not getting any rest “between the years”. On Christmas, a highly critical security vulnerability in MongoDB nicknamed “MongoBleed” became known, through which attackers from the network ...

MongoBleed (CVE-2025-14847) leaks sensitive data via uninitialized heap memory exploitation Roughly 87,000 exposed MongoDB instances vulnerable; most located in U.S., China, and Germany Patch released ...

Hackers are actively exploiting the MongoBleed vulnerability, dumping server memory and scouring for passwords, tokens, credentials, and other sensitive data, cyber authorities warn. Estimates suggest ...

Cybersecurity authorities in the U.S. and Australia are warning that a critical vulnerability in MongoDB and MongoDB Server is being actively exploited in the wild and represents a threat for ...

Dubbed MongoBleed, the high-severity flaw allows unauthenticated, remote attackers to leak sensitive information from MongoDB servers. Threat actors started exploiting a high-severity MongoDB ...

A recently disclosed security vulnerability in MongoDB has come under active exploitation in the wild, with over 87,000 potentially susceptible instances identified across the world. The vulnerability ...

A high-severity vulnerability in MongoDB that can allow unauthenticated remote hackers to leak sensitive information from MongoDB servers is being exploited in the wild, days after a proof-of-concept ...