VULNERABILITY INTELLIGENCE

CVE-2025-11695

CVSS score8 HIGH
EPSS probability0.18%
CISA KEVNot currently listed
Published2025-10-13
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

Description

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5

Weakness classification

  • cna@mongodb.com: CWE-295

Primary references