Post

patch ye MongoDB, there's an exploit for a vuln which has been in the product for over a decade that allows the remote, unauth read of any memory - which includes plaintext creds. Somebody posted an exploit on Christmas Day, Merry Christmas! doublepulsar.com/merry-christ...

doublepulsar.comMerry Christmas Day! Have a MongoDB security incident.Somebody from Elastic Security decided to post an exploit for CVE-2025–14847 on Christmas Day.

26/12/25, 10:57 pm45 reposts102 likes

Alexander

@alexsguardian.net

27 Dec 2025

I'm currently on vacation and a dev sent me this CVE as a x-mas present. 😭

Sagittarius A*

@sagastar.bsky.social

26 Dec 2025

ah, mongobleed. folks have been talking about it for a few days but ofc some goober has to post an exploit on christmas.

Kevin Beaumont

@doublepulsar.com

28 Dec 2025

Recommend patching MongoDB as soon as ye back in the office tomorrow as I know of two large orgs now with big incidents caused by this. There's a ransomware/extortion group spraying the internet with mongobleed.py, to dump secrets.