MongoBleed: CVE-2025-14847

Cyber News
,
1

Beaumont’s summary: https://doublepulsar.com/merry-christmas-day-have-a-mongodb-security-incident-9537f54289eb

PoC: GitHub - joe-desimone/mongobleed

Additional technical details: https://www.ox.security/blog/attackers-could-exploit-zlib-to-exfiltrate-data-cve-2025-14847

2

So this is a memory leak issue similar to CitrixBleed. Not direct RCE but secrets exfil possible.