Security News New MongoDB Flaw Lets Unauthenticated Attackers Read Uninitialized Memory TheHackerNews Daniel Bender 27 Dec 2025 High-severity CVE-2025-14847 allows unauthenticated attackers to read uninitialized heap memory in MongoDB due to a zlib compression handling flaw.