Security Digest
MongoDB: known exploited vulnerabilities
1 MongoDB CVE CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2025-12-29 | CVE-2025-14847 | MongoDB MongoDB and MongoDB Server MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability | 2026-01-19 |