MongoBleed (CVE-2025-14847): What MongoDB Users Need to Know About This Memory Leak

**MongoBleed (CVE-2025-14847)** is an unauthenticated memory-disclosure vulnerability in MongoDB servers that allows attackers to extract fragments of uninitialized heap memory via malformed zlib-compressed network messages, potentially exposing credentials, tokens, session identifiers and PII; it affects MongoDB versions from 3.6 through early 8.2.x, has a CVSS of 7.5, a public PoC and reports of active exploitation, and remediation includes upgrading to patched releases, disabling zlib compression, and restricting network access.