CVE-2025-14847 affecting MongoDB

CVE-2025-14847 affecting MongoDB

CVE-2025-14847 exposes MongoDB Server to unauthenticated remote attacks through malformed zlib-compressed protocol headers, leaking uninitialized heap memory on port 27017. This high-severity flaw (CVSS 8.7) affects versions before 8.2.3, 8.0.17,…
MongoDB is affected by Twin Critical Vulnerabilities

MongoDB is affected by Twin Critical Vulnerabilities

CVE-2025-23061: Mongoose Search Injection Vulnerability Description: CVE-2025-23061 is a critical vulnerability identified in Mongoose versions prior to 8.9.5. The vulnerability arises due to the improper handling of nested $where filters…
MongoDB Queryable Encryption GA

MongoDB Queryable Encryption GA

MongoDB has announced the availability of Queryable Encryption, an end-to-end data encryption technology for securing sensitive application workflows. The featureset is designed to reduce the risk of data exposure for…
Exposed Database Peaks! Alert

Exposed Database Peaks! Alert

The number of public-facing databases increased 16% in second half of 2021. Researchers on Wednesday reported that in the second half of 2021, the number of public-facing databases increased by…