MongoDB – CyberSecurityBoard

Critical CVEs

Critical Ruflo MCP Flaw Allows Unauthenticated Remote Code Execution and AI Memory Poisoning

Cybersecurity researchers have disclosed a maximum-severity vulnerability in Ruflo, an open-source AI multi-agent orchestration platform, that could allow unauthenticated attackers to achieve…

AgentDB AI memory poisoning Anthropic Anthropic Claude Code

July 29, 2026

Critical CVEs

CVE-2025-14847: MongoBleed Vulnerability

A vulnerability in MongoDB, exploited via fake PoC repos in the ChocoPoC campaign.

CVE-2025-14847 data leak MongoBleed MongoDB

July 2, 2026

Cyber Products

MongoDB: Exposed in Ruflo Deployment, Enabling Conversation Theft

MongoDB is used by Ruflo for data storage. The default docker-compose configuration exposed MongoDB on port 27017 without authentication, allowing attackers to…

CVE-2026-59726 data theft MongoDB Ruflo

June 25, 2026

Cyber News

Top 10 Attack Surface Exposures in 2026: Databases, Admin Panels, and Legacy Services Dominate

According to a new analysis by Intruder, 60% of organizations have at least one HTTP panel exposed, 49% have a risky port…

API Security attack surface management BlueKeep CVE-2019-0708

June 25, 2026