CVE-2025-11695

HighCVSS 7.5/10Last modified Oct 8, 2026

Description

When tlsInsecure=False appears in a connection string, certificate validation is disabled.

This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-295

Affected software

No affected versions have been published.

Timeline

Published
Oct 13, 2025
Last modified
Oct 8, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-116968.9A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability aCVE-2025-116978.9A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows usCVE-2025-116989.2A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially CVE-2025-116997.1nopCommerce v4.70 and prior, and version 4.80.3, does not invalidate session cookies after logout or session termination, allowing an attackCVE-2025-11705.4A vulnerability classified as problematic has been found in code-projects Real Estate Property Management System 1.0. Affected is an unknownCVE-2025-117007.5N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosureCVE-2025-117015.3The Zip Attachments plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check as well as missing pCVE-2025-117028.8GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could hCVE-2025-117035.3The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Cache Poisoning in all versions up to, and including, 9.0.48.CVE-2025-117047.5The Elegance Menu plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the 'elegance-menCVE-2025-117056.5The Anti-Malware Security and Brute-Force Firewall plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and inclCVE-2025-117066.1The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the dbstatus parameter in all versions up t
CVE-2025-11695: High severity, CVSS 7.5 | Vulnix