CVE-2025-14847

CVSS

—

EPSS

0.832 (99.7th percentile)

CISA KEV

Added 2025-12-29, due 2026-01-19

Exploitation

No report

Public exploits

40 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 70Wiz Research28 Dec 2025, 09:24

  MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know

  Detect and mitigate CVE-2025-14847, an unauthenticated information leak vulnerability in MongoDB. Exploitation has been observed in the wild. Organizations should patch urgently.

  ↗wiz.io/blog/mongobleed-cve-2025-14847-exploited…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:36poc publishedpoc-in-github
2. 24 Sept, 12:18poc publishedpoc-in-github
3. 24 Sept, 11:55poc publishedpoc-in-github
4. 24 Sept, 11:50kev addedcisa-kev