History

29 Dec 2025

1 new, 0 updated.

New that day

  1. highpatchedexploited MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability MongoDB MongoDB and MongoDB Server MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib compressed protocol headers. This vulnerability may allow a read of uninitialized heap memory by an unauthenticated client. Added to CISA KEV on 2025-12-29 (federal deadline 2026-01-19). CVE-2025-148471 source