Back to the CVE list
CVE-2025-14847 CISA KEV · Actively exploited

MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

CVSS score

—

EPSS probability

%83.2

Risk score

—

Published

9 mo ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

poc for CVE-2025-14847 (★5)

Public PoCSource updated: 26.12.2025 20:29:02

a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security researchers to extract sensitive data from vulnerable MongoDB instances. (★4)

Public PoCSource updated: 28.12.2025 02:51:02

MongoDB 内存泄露漏洞 (CVE-2025-14847) 检测工具 (★1)

Public PoCSource updated: 27.12.2025 02:02:45

CVE-2025-14847 (MongoBleed) (★1)

Public PoCSource updated: 30.12.2025 07:02:17

CVE-2025-14847 MongoBleed - MongoDB Memory Leak Vulnerability PoC (★1)

Public PoCSource updated: 31.12.2025 00:58:31

🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data. (★0)

Public PoCSource updated: 15.01.2026 15:37:09

CVE-2025-14847 (★0)

Public PoCSource updated: 28.12.2025 03:42:26

The script focuses on safe artifact acquisition first, followed by optional on-host analysis, and produces a portable, hashed forensic archive suitable for offline investigation on a forensic workstation. (★0)

Public PoCSource updated: 29.12.2025 03:39:50

Explot, Lab, Scanner - external and docker container, for SMongobleed-CVE-2025-14847 plus phoenix security uploader (★0)

Public PoCSource updated: 29.12.2025 08:10:38

CVE-2025-14847 – MongoDB Unauthenticated Memory‑Leak Exploit (★0)

Public PoCSource updated: 29.12.2025 15:08:07

MongoBleed: CVE-2025-14847 Memory Leak Discovery Tool (★0)

Public PoCSource updated: 29.12.2025 17:03:04

Nuclei: MongoDB Server - Information Disclosure (MongoBleed)

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-14847"