UBUNTU-CVE-2025-12893

🗓️ 25 Nov 2025 05:15:00Reported by GoogleType

osv🔗 osv.dev👁 2 Views

MongoDB on Windows or Apple accepts TLS certs with Extended Key Usage mismatch; vulnerable before 7.0.26, 8.0.16, and 8.2.2.

Reporter	Title	Published	Views	Family All 17
CNNVD	MongoDB Server 安全漏洞	25 Nov 202500:00	–	cnnvd
CVE	CVE-2025-12893	25 Nov 202505:07	–	cve
Cvelist	CVE-2025-12893 Improper Certificate Validation May Allow Successful TLS Handshaking Despite Invalid Extended Key Usage Fields in MongoDB Server	25 Nov 202505:07	–	cvelist
FreeBSD	MongoDB Server -- Improper Certificate Validation	25 Nov 202500:00	–	freebsd
EUVD	EUVD-2025-199532	25 Nov 202505:07	–	euvd
Tenable Nessus	FreeBSD : MongoDB Server -- Improper Certificate Validation (d2f2c691-cd42-11f0-85d4-b42e991fc52e)	3 Dec 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-12893	1 Dec 202500:00	–	nessus
MongoDB	Improper Certificate Validation May Allow Successful TLS Handshaking Despite Invalid Extended Key Usage Fields in MongoDB Server	25 Nov 202505:07	–	mongodb
NVD	CVE-2025-12893	25 Nov 202505:15	–	nvd
OSV	BIT-MONGODB-2025-12893 Improper Certificate Validation May Allow Successful TLS Handshaking Despite Invalid Extended Key Usage Fields in MongoDB Server	6 Dec 202511:42	–	osv