Merry Christmas Day! Have a MongoDB security incident.

This page did not load. You can still read it on the original site — the toolbar below keeps your place in the directory.

Somebody from Elastic Security decided to post an exploit for CVE-2025–14847 on Christmas Day. Here’s said exploit: GitHub - joe-desimone/mongobleed The vuln, which dropped just before Christmas, in theory allowed memory read without authentication. Patches are available. It impacts every version of MongoDB going back about a decade. Another vendor decided it would be a great idea to post…

Read on doublepulsar.com ↗