Secure the future of MySQL. Sign this open letter

PSMDB and MongoDB MongoBleed: impact, mitigations, and patching strategy - February 24, 2026

Speakers:  Ivan Groenewold

Discover how CVE-2025-14847 (“MongoBleed”) can expose MongoDB to high-severity information disclosure—allowing an unauthenticated remote client to extract fragments of uninitialized server memory when zlib network compression is enabled on a network-reachable instance.

In this interview, we’ll break down who’s at risk, why zlib is the trigger, and the fastest mitigation: disable zlib while keeping snappy/zstd. We’ll also show how to confirm the fix (server options, logs, and PMM metrics) and how to plan upgrades to patched releases.

Join our Community Office Hours!

Percona Community Office Hours Ivan

Speaker Bios

Ivan Groenewold

MongoDB Tech Lead, Percona | Open source enthusiast

Passionate about technology, Ivan Groenewold is a seasoned professional with extensive experience in database management, cloud infrastructure, and software development.

With a focus on optimizing performance and scalability, Ivan excels in designing and implementing solutions for complex systems, particularly in MongoDB and cloud-native environments.

Known for problem-solving and a results-driven mindset, Ivan combines technical expertise with a commitment to continuous learning, delivering high-quality solutions for modern enterprise applications.

See all talks by Ivan Groenewold »

✎ Edit this page on GitHub