CVE-2025-14847Vulnerability
MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Sekoia.io · last reported
Last reported 3 months ago
CISA KEVAdded 29 Dec 2025
Fix due 19 Jan 2026
Used by ransomware: not knownCISA KEV catalogue
Fix due 19 Jan 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS83.2%
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
Don't Eat the ChocoPoCs: Trojanised PoCs Hit Researchers“lincemorado97/CVE-2025-14847”
Indicators reported together
named in the same reports- hxxps://github[.]com/ogenich/CVE-2026-48908in 1 report
- hxxps://api.mapbox[.]com/datasets/v1/frankley/cmor0tcxf008i1mmpd7apt903/features/dm370543acmdopk296nahbtuain 1 report
- student.uin-suka.ac[.]idin 1 report
- ogrenci.ibu.edu[.]trin 1 report
- pepy[.]techin 1 report
- pypistats[.]orgin 1 report
- 93739477cd379ade…856fa111dd06in 1 report
- 17997e9e0256d0f5…822b24aa76b4in 1 report
- 5abd45d6f4a1705d…a35c23de5caein 1 report
- 40569318e89db751…a28129ca36bcin 1 report
- 320b29844892e3c5…9e294ec6d43ein 1 report
- hxxps://github[.]com/lincemorado97/CVE-2025-64446_CVE-2025-58034in 1 report
- hxxps://github[.]com/lincemorado97/CVE-2025-55182_CVE-2025-66478in 1 report
- hxxps://github[.]com/lincemorado97/CVE-2025-14847in 1 report
Copy these 14 indicators · defanged
Also named with it: CVE-2025-55182, CVE-2026-48908, CVE-2026-0257, CVE-2026-10520, CVE-2026-50751, CVE-2025-64446
Thanks — we review every report.