Skip to content

Known vulnerabilities in Cesanta Mongoose

Is your version affected?

CVE Summary Score Published
CVE-2026-73253 Mongoose is an embedded web server and network library 9.1 Critical Aug 20, 2026
CVE-2026-73256 Mongoose is an embedded web server and network library 9.1 Critical Aug 20, 2026
CVE-2026-73251 Mongoose is an embedded web server and network library 9.3 Critical Aug 20, 2026
CVE-2026-73257 Mongoose is an embedded web server and network library 9.1 Critical Aug 20, 2026
CVE-2017-2891 An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8 9.8 Critical Nov 7, 2017
CVE-2017-2922 An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8 9.8 Critical Nov 7, 2017
CVE-2017-2894 An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose… 9.8 Critical Nov 7, 2017
CVE-2017-2892 An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose… 9.8 Critical Nov 7, 2017

Other Cesanta products