⚡ Weekly Recap: MongoDB Attacks, Wallet Breaches, Android Spyware, Insider Crime & More

Summary: A newly disclosed MongoDB vulnerability, CVE-2025-14847 (CVSS 8.7) and codenamed MongoBleed, is under active exploitation and allows an unauthenticated attacker to remotely leak sensitive data from server memory. Censys counts more than 87,000 potentially vulnerable instances, mostly in the U.S., China, Germany, India, and France, and Wiz reports 42% of cloud environments have at least one MongoDB instance on a vulnerable version.
What you should know: More than 87,000 exposed instances and 42% of cloud environments carrying a vulnerable MongoDB version mean an unauthenticated memory-leak bug is now a live exposure for a large share of cloud estates, not a theoretical one.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2023-52163 CVE-2025-13008 CVE-2025-13836 CVE-2025-14847 CVE-2025-26794 CVE-2025-44016 CVE-2025-68613 CVE-2025-68615 CVE-2025-68664
Related: CVE-2025-68613: n8n Improper Control of Dynamically-Managed Code Resources Vulnerability Known Exploited Vulnerabilities · Mar 11, 2026
CVE-2025-14847: MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability Known Exploited Vulnerabilities · Dec 29, 2025
CVE-2023-52163: Digiever DS-2105 Pro Missing Authorization Vulnerability Known Exploited Vulnerabilities · Dec 22, 2025