Post

patch ye MongoDB, there's an exploit for a vuln which has been in the product for over a decade that allows the remote, unauth read of any memory - which includes plaintext creds. Somebody posted an exploit on Christmas Day, Merry Christmas! doublepulsar.com/merry-christ...

doublepulsar.comMerry Christmas Day! Have a MongoDB security incident.Somebody from Elastic Security decided to post an exploit for CVE-2025–14847 on Christmas Day.

Kevin Beaumont

@doublepulsar.com

Recommend patching MongoDB as soon as ye back in the office tomorrow as I know of two large orgs now with big incidents caused by this. There's a ransomware/extortion group spraying the internet with mongobleed.py, to dump secrets.

28/12/25, 7:32 pm5 reposts13 likes

No replies yet.