MongoBleed (CVE-2025-14847) is an unauthenticated heap-memory disclosure reachable through MongoDB’s zlib-compressed wire protocol handling. This post explains the exploit primitives and then breaks down the structure and intent of a widely shared public PoC—without turning into a step-by-step exploitation guide.