Critical MongoDB Vulnerability Exposes Sensitive Data via Zlib Compression

A critical security vulnerability, tracked as CVE-2025-14847, that could allow attackers to extract uninitialized heap memory from database servers without authentication. The flaw resides in MongoDB’s zlib compression implementation and affects multiple versions of the database platform.​ The vulnerability enables client-side exploitation of the MongoDB Server’s zlib implementation. Potentially exposing sensitive data stored in uninitialized heap […]

The post Critical MongoDB Vulnerability Exposes Sensitive Data via Zlib Compression appeared first on Cyber Security News.