CISA Adds One Known Exploited Vulnerability to Catalog

On December 29, 2025, CISA added a new vulnerability, CVE-2025-14847 concerning MongoDB, to its Known Exploited Vulnerabilities Catalog due to active exploitation evidence. This vulnerability poses significant risks, especially to federal enterprises. CISA advises all organizations to prioritize the remediation of such vulnerabilities to mitigate cyberattack risks.