MongoBleed defect swirls, stamping out hope of year-end respite

MongoBleed (CVE-2025-14847) is a high-severity memory-leak vulnerability in many default-configured MongoDB versions that can let unauthenticated actors leak server memory (potentially exposing credentials/tokens). Public proofs of concept and reports of active exploitation have appeared, tens of thousands of exposed instances were identified by scanning services, and the defect (CVSS 8.7) is notable for ease of exploitation at scale and limited forensic traces.