CISA Warns of MongoDB Server Vulnerability(CVE-2025-14847) Exploited in Attacks

CISA has added CVE-2025-14847 — a critical, unauthenticated MongoDB Server vulnerability enabling read access to uninitialized heap memory — to its Known Exploited Vulnerabilities catalog after confirming active exploitation; organizations are urged to apply vendor patches or follow BOD 22-01 mitigations immediately to prevent potential data disclosure and further compromise.