Veille CVE

Semaine du 29 décembre au 4 janvier 2026

1 CVE

  1. CVE-2025-14847 – Non évaluée Exploitée

    MongoDB MongoDB and MongoDB Server

    MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability — MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib compressed protocol headers. This vulnerability may allow a read of uninitialized heap memory by an unauthenticated client.