CISA orders feds to patch MongoBleed flaw exploited in attacks

Published on December 30, 2025

CISA ordered U.S. federal agencies to patch an actively exploited MongoDB vulnerability (MongoBleed) that can be exploited to steal credentials, API keys, and other sensitive data. [...]