Skip to content

40,000 MongoDB Databases Exposed, Posing Major Security Risk

40,000 MongoDB databases found exposed online. Experts warn of potential data breaches and urge organizations to secure their databases.

In this picture we can observe a statue of a nun wearing a black and white color dress. There is a...
In this picture we can observe a statue of a nun wearing a black and white color dress. There is a bird on the shoulder of the statue. In the background there is a white and cream color wall.

40,000 MongoDB Databases Exposed, Posing Major Security Risk

Alarming news has emerged regarding the security of MongoDB databases. Around 40,000 vulnerable databases have been discovered on the internet, posing a significant risk to data security. The discovery was made by Qualys Vulnerability Management, which has released QID 19965 to check for exposed MongoDB databases. The detection process involves sending queries to the default MongoDB port and analyzing responses. The first query identifies if a MongoDB instance is running, and the second query checks if it's open to unauthenticated access. MongoDB databases are often configured to accept any connection from the internet, making them susceptible to manipulation by remote attackers. This was highlighted by a security flaw discovered in September 2025. Three students from the University of Saarland also found that thousands of commercial web servers have MongoDB databases accessible from the internet. The discovery of these vulnerable databases underscores the importance of robust security measures for MongoDB databases. Organizations must ensure their databases are not exposed to unauthenticated access to mitigate potential security risks.

Read also:

Latest