Skip to content

Known vulnerabilities in Cesanta Mongoose

Is your version affected?

CVE Summary Score Published
CVE-2026-115473 Mongoose: Heap OOB reads and null-byte bypass in mg_path_is_sane (util.c) 6.5 Medium Nov 4, 2026
CVE-2026-63626 Mongoose is an embedded web server and network library 8.8 High Oct 14, 2026
CVE-2026-73261 Mongoose is an embedded web server and network library 7.5 High Oct 14, 2026
CVE-2026-73260 Mongoose is an embedded web server and network library 7.5 High Oct 14, 2026
CVE-2026-73252 Mongoose is an embedded web server and network library 7.5 High Oct 14, 2026
CVE-2026-101003 A weakness has been identified in Cesanta Mongoose up to 7.21 6.9 Medium Sep 28, 2026
CVE-2026-73253 Mongoose is an embedded web server and network library 9.1 Critical Aug 20, 2026
CVE-2026-73255 Mongoose is an embedded web server and network library 6.5 Medium Aug 20, 2026
CVE-2026-73259 Mongoose is an embedded web server and network library 5.4 Medium Aug 20, 2026
CVE-2026-73256 Mongoose is an embedded web server and network library 9.1 Critical Aug 20, 2026
CVE-2026-73254 Mongoose is an embedded web server and network library 5.4 Medium Aug 20, 2026
CVE-2026-73258 Mongoose is an embedded web server and network library 6.5 Medium Aug 20, 2026
CVE-2026-73251 Mongoose is an embedded web server and network library 9.3 Critical Aug 20, 2026
CVE-2026-73257 Mongoose is an embedded web server and network library 9.1 Critical Aug 20, 2026
CVE-2026-11404 Cesanta Mongoose before 7.22 contains an out-of-bounds read in the built-in TLS server function… 8.7 High Jul 9, 2026
CVE-2026-6986 A security vulnerability has been detected in Cesanta Mongoose up to 7.20 6.3 Medium Apr 25, 2026
CVE-2026-6985 A weakness has been identified in Cesanta Mongoose up to 7.20 6.9 Medium Apr 25, 2026
CVE-2026-5246 A vulnerability was determined in Cesanta Mongoose up to 7.20 6.3 Medium Apr 2, 2026
CVE-2026-5245 A vulnerability was found in Cesanta Mongoose up to 7.20 6.3 Medium Apr 2, 2026
CVE-2026-5244 A vulnerability has been found in Cesanta Mongoose up to 7.20 6.9 Medium Apr 2, 2026
CVE-2026-2968 A vulnerability was detected in Cesanta Mongoose up to 7.20 6.3 Medium Feb 23, 2026
CVE-2026-2967 A security vulnerability has been detected in Cesanta Mongoose up to 7.20 6.3 Medium Feb 23, 2026
CVE-2026-2966 A weakness has been identified in Cesanta Mongoose up to 7.20 6.3 Medium Feb 23, 2026
CVE-2024-42389 Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an… 5.3 Medium Nov 18, 2024
CVE-2024-42388 Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an… 5.3 Medium Nov 18, 2024

Other Cesanta products