Text only | Text with Images

OPNsense Forum

English Forums => 25.7, 25.10 Series => Topic started by: PencilHCV on December 31, 2025, 11:14:56 AM

Title: CVE-2025-14847 vulnerability Mongo Database
Post by: PencilHCV on December 31, 2025, 11:14:56 AM
Hello everyone and Happy New Year!
I know this belongs to "Zenarmor", but it's been a few days since I asked there with no response. Can anyone please answer my question:
"Is Mongo Database vulnerable to CVE-2025-14847?"

best regards,
Hugo
Title: Re: CVE-2025-14847 vulnerability Mongo Database
Post by: sopex8260 on December 31, 2025, 11:32:38 AM
Which version of zenarmor are you using?
Title: Re: CVE-2025-14847 vulnerability Mongo Database
Post by: PencilHCV on December 31, 2025, 11:35:03 AM
2.31
Title: Re: CVE-2025-14847 vulnerability Mongo Database
Post by: PencilHCV on December 31, 2025, 11:38:01 AM
I know I can change the Database engine to Elasticsearch and then the problem is gone, right? But it would be good to know if the vulnerability is there in the Mongo Database that Zenarmor uses.

best regards,
Hugo
Title: Re: CVE-2025-14847 vulnerability Mongo Database
Post by: Seimus on December 31, 2025, 12:43:54 PM
There really is no reason to ask this other than on the ZA subsection on the forum.

If you want a faster responce you can always open the a ticket via the ZA GUI in OPNsense.

Regards,
S.
Title: Re: CVE-2025-14847 vulnerability Mongo Database
Post by: PencilHCV on January 01, 2026, 09:41:27 AM
Thank you Seimus for your clarification and help!

best regards,
Hugo
Text only | Text with Images