topic CVE-2025-14847 MongoDB Server Bulnerability in General Topics

CVE-2025-14847 MongoDB Server Bulnerability

JunSuLee — Mon, 29 Dec 2025 04:21:56 GMT

A MongoDB vulnerability (CVE-2025-14847) was recently disclosed. We would like to verify whether Palo Alto Networks NGFW and any other Palo Alto Networks solutions are affected by this vulnerability, and if so, what mitigations or updates are recommended.

Re: CVE-2025-14847 MongoDB Server Bulnerability

ellinorb — Mon, 29 Dec 2025 11:42:38 GMT

It seems the mondoDB version used is vulnerable, it's using 3.6.19 on 11.2 for example
PAN-OS 11.2 OSS Listing

Question is if zlib compression is enabled as it's required to be vulnerable

There is however 0 official communication from Palo regarding this...