high
CVE-2025-14847
MongoBleed: unauthenticated zlib-decompression heap memory disclosure
- Severity
- high
- Affected product
- MongoDB
- Technology guide
- MongoDB security testing
- Affected versions
- MongoDB ≥ 3.6.0, < 8.0.5
- Fixed in
- MongoDB 8.0.5 / 7.0.16 (confirm against advisory)
- Detection basis
- Component version range
- Shipped rule
- MongoDB: MongoBleed: unauthenticated zlib-decompression heap memory disclosure
- Added to NewScan
- 2026-07-11
- Detected by
- NewScan — free, self-hosted
How NewScan reports it
COMPONENT VERSION RANGE
NewScan fingerprints MongoDB from its response and reports this CVE when the detected version falls inside the affected range below.
References
Scan for this yourself — local, in-band scanning is free.
Get NewScan (FREE) →Review the measured benchmark, then use the verified remediation process.