EXPLOIT/ALERT Back to feed

MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib compressed protocol headers. This vulnerability may allow a read of uninitialized heap memory by an unauthenticated client.

Published 28 Sep 2026Updated 28 Sep 20263374 sources
CVSS 8.7 PoC CANDIDATE△ CISA KEV
Overview Sources History

What happened

MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib compressed protocol headers. This vulnerability may allow a read of uninitialized heap memory by an unauthenticated client.

Affected versions

MongoDB and MongoDB Server: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

  • Review the original advisory and validate affected versions.
  • Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference
SploitusMemory disclosure in MongoDB zlib compression handling via CVE-2025-14847 enabling data extraction.KitPloit2026-09-22T11:15:04Candidatekitploit.comMemory disclosure in MongoDB zlib compression handling via CVE-2025-14847 enabling data extraction.ru2026-09-22T11:15:04CandidatePoC-in-GitHub · sakthivel10q/CVE-2025-14847🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.★ 1sakthivel10q2025-07-30CandidatePoC-in-GitHub · onewinner/CVE-2025-14847MongoDB 内存泄露漏洞 (CVE-2025-14847) 检测工具★ 15onewinner2025-12-26CandidatePoC-in-GitHub · ProbiusOfficial/CVE-2025-14847poc for CVE-2025-14847★ 26ProbiusOfficial2025-12-26CandidatePoC-in-GitHub · cybertechajju/CVE-2025-14847_Expolita critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security researchers to extract sensitive data from vulnerable MongoDB instances.★ 35cybertechajju2025-12-27CandidatePoC-in-GitHub · KingHacker353/CVE-2025-14847_Expolit★ 0KingHacker3532025-12-27CandidatePoC-in-GitHub · Black1hp/mongobleed-scannerMongoDB CVE-2025-14847 Heap Memory Leak Scanner | OP_COMPRESSED zlib Vulnerability | Bug Bounty & Red Team Tool★ 35Black1hp2025-12-27CandidatePoC-in-GitHub · nma-io/mongobleedgolang test tool for mongobleed (cve-2025-14847)★ 2nma-io2025-12-27CandidatePoC-in-GitHub · saereya/CVE-2025-14847---MongoBleed★ 0saereya2025-12-27CandidatePoC-in-GitHub · JemHadar/MongoBleed-DFIR-Triage-Script-CVE-2025-14847The script focuses on safe artifact acquisition first, followed by optional on-host analysis, and produces a portable, hashed forensic archive suitable for offline investigation on a forensic workstation.★ 0JemHadar2025-12-28CandidatePoC-in-GitHub · franksec42/mongobleed-exploit-CVE-2025-14847Explot, Lab, Scanner - external and docker container, for SMongobleed-CVE-2025-14847 plus phoenix security uploader★ 3franksec422025-12-28CandidatePoC-in-GitHub · Security-Phoenix-demo/mongobleed-exploit-CVE-2025-14847Exploit lab, docker and code scanner for mongobleed Vulnerability CVE-2025-14847 plus Phoenix Security Sync tools★ 13Security-Phoenix-demo2025-12-29CandidatePoC-in-GitHub · codeb0ssx/CVE-2025-14847-PoCAcademic proof-of-concept demonstrating CVE-2025-14847 for authorized security research.★ 4codeb0ssx2025-12-29CandidatePoC-in-GitHub · 14mb1v45h/CYBERDUDEBIVASH-MONGODB-DETECTOR-v2026Detect exposed MongoDB instances and CVE-2025-14847 "MongoBleed" risks — Zero-Trust Python scanner★ 014mb1v45h2025-12-29CandidatePoC-in-GitHub · kuyrathdaro/cve-2025-14847MongoBleed: CVE-2025-14847 Memory Leak Discovery Tool★ 0kuyrathdaro2025-12-29CandidatePoC-in-GitHub · joshuavanderpoll/CVE-2025-14847CVE-2025-14847 (MongoBleed)★ 4joshuavanderpoll2025-12-29CandidatePoC-in-GitHub · tunahantekeoglu/MongoDeepDiveContext-Aware Memory Leak Scanner & Exploit for CVE-2025-14847.★ 0tunahantekeoglu2025-12-29CandidatePoC-in-GitHub · vfa-tuannt/CVE-2025-14847Remake of CVE-2025-14847 MongoDB vulnerability demonstration★ 0vfa-tuannt2025-12-30CandidatePoC-in-GitHub · j0lt-github/mongobleedburpBurp Suite extension to detect CVE-2025-14847 (MongoBleed) via manual leak tests from a dedicated UI tab.★ 0j0lt-github2025-12-30CandidatePoC-in-GitHub · FurkanKAYAPINAR/CVE-2025-14847-MongoBleed-ExploitCVE-2025-14847 MongoBleed - MongoDB Memory Leak Vulnerability PoC★ 1FurkanKAYAPINAR2025-12-30CandidatePoC-in-GitHub · NoNameError/MongoBLEED---CVE-2025-14847-POC-This repo contains my python script version of CVE-2025-14847 (MongoBleed)★ 1NoNameError2025-12-30CandidatePoC-in-GitHub · Rishi-kaul/CVE-2025-14847-MongoBleed★ 0Rishi-kaul2025-12-31CandidatePoC-in-GitHub · Systemhaus-Schulz/MongoBleed-CVE-2025-14847MongoBleed CVE-2025-14847 Vulnerability Checker★ 0Systemhaus-Schulz2026-01-01CandidatePoC-in-GitHub · ElJoamy/MongoBleed-exploitMongoBleed (CVE-2025-14847) Lab & PoC : A complete educational environment to reproduce the critical unauthenticated memory leak in MongoDB. Includes a vulnerable Docker container with multi-database seeding (PII, API keys) and a Python exploit to demonstrate data extraction. Ideal for security research and awareness. 1-day analysis.★ 0ElJoamy2026-01-02CandidatePoC-in-GitHub · keraattin/Mongobleed-Detector-CVE-2025-14847Mongobleed Detector CVE-2025-14847★ 1keraattin2026-01-04CandidatePoC-in-GitHub · waheeb71/CVE-2025-14847CVE-2025-14847 MongoDB Memory Leak Exploit★ 1waheeb712026-01-06CandidatePoC-in-GitHub · CadGoose/MongoBleed-CVE-2025-14847-Fully-Automated-scannerFull automation check for CVE-2025-14847 MonogBleed- Finds origin IP and tests for exploit.★ 1CadGoose2026-01-07CandidatePoC-in-GitHub · im-hanzou/mongobleedCVE-2025-14847 PoC exploit for MongoDB heap memory disclosure★ 0im-hanzou2026-01-08CandidatePoC-in-GitHub · AdolfBharath/mongobleedCVE-2025-14847 explaination and lab★ 1AdolfBharath2026-01-09CandidatePoC-in-GitHub · sahar042/CVE-2025-14847★ 0sahar0422026-01-11CandidatePoC-in-GitHub · peakcyber-security/CVE-2025-14847CVE-2025-14847 | MongoBleed vulnerability proof of concept project★ 2peakcyber-security2026-01-12CandidatePoC-in-GitHub · alexcyberx/CVE-2025-14847_Expolit★ 2alexcyberx2026-01-13CandidatePoC-in-GitHub · pedrocruz2202/mongobleed-scanner🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.★ 0pedrocruz22022026-01-14CandidatePoC-in-GitHub · pedrocruz2202/pedrocruz2202.github.io🛡️ Detect vulnerable MongoDB instances with the high-performance MongoBleed scanner for CVE-2025-14847, ensuring network security and data protection.★ 0pedrocruz22022026-01-14CandidatePoC-in-GitHub · sakthivel10q/sakthivel10q.github.io🛠 Exploit the CVE-2025-14847 MongoDB vulnerability to reveal sensitive information through crafted zlib-compressed packets and real-time output.★ 0sakthivel10q2026-01-15CandidatePoC-in-GitHub · amnnrth/CVE-2025-14847This script is used to identify MongoDB services that are network-exposed and allow unauthenticated protocol handshakes.★ 0amnnrth2026-01-20CandidatePoC-in-GitHub · InfoSecAntara/CVE-2025-14847-MongoDB★ 1InfoSecAntara2026-01-21CandidatePoC-in-GitHub · sho-luv/MongoBleedCVE-2025-14847 (MongoBleed) scanner and exploit tool. Unauthenticated MongoDB heap memory leak via zlib decompression. Detection, memory extraction, credential parsing, CIDR/batch scanning, Nuclei templates, and CTF lab included★ 2sho-luv2026-02-07CandidatePoC-in-GitHub · 0xBlackash/CVE-2025-14847CVE-2025-14847★ 00xBlackash2026-02-23CandidatePoC-in-GitHub · dawnsmithcyber/azure-vulnerability-remediation-projectEnd-to-end vulnerability management lifecycle on Azure Windows Server 2025. Features OS patching and network-level compensating controls (NSG) to mitigate CVE-2025-14847.★ 1dawnsmithcyber2026-04-06CandidatePoC-in-GitHub · shokribardiya/CVE-2025-14847-mongobleedCVE-2025-14847 mongobleed python file★ 1shokribardiya2026-06-14CandidateSploitusExploit for CVE-2025-14847. CVSS 8.7.Sploitus index2026-10-01T10:15:57+00:00Candidate
CorrectionsReport an issue