cesanta
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 159 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 10, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Mongoose: Heap OOB reads and null-byte bypass in mg_path_is_sane (util.c)
Mongoose: handle_opt() missing opts[1] > len check — 1-byte OOB read corrupts TCP MSS, silences mg_send() per connection
Mongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAX
Cesanta Mongoose MQTT Broker main.c fn stack-based overflow
Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching
Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching
Mongoose: Path traversal in SSI #include directives enables arbitrary file read
Mongoose: Path traversal in SSI #include directives enables arbitrary file read
Mongoose: Reflected XSS via decoded URI in directory listing render
Mongoose: Reflected XSS via decoded URI in directory listing render
Monitor cesanta in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.