Latest vulnerabilities for vendor "cesanta"

Where

Sort:

Software

cesanta mongoose

cesanta frozen

cesanta/mongoose

cesanta mongoose embedded web server library

cesanta mongoose os

Cesanta MongooseCesanta Mongoose Out-of-Bounds Read in MG_TLS_BUILTIN ClientHello Session ID Parsing

Risk 47

Severity

8.7

First published (updated )

CVE-2026-11404

Cesanta MongooseCesanta Mongoose GCM Authentication Tag tls_aes128.c mg_aes_gcm_decrypt signature verification

Risk 15

Severity

2.9

EPSS

0.01%

First published (updated )

CVE-2026-6986

Cesanta MongooseCesanta Mongoose TCP Option net_builtin.c handle_opt infinite loop

Risk 31

Severity

5.5

EPSS

0.15%

First published (updated )

CVE-2026-6985

Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices

First published (updated )

Social

Cesanta MongooseCesanta Mongoose P-384 Public Key mongoose.c mg_tls_verify_cert_signature authorization

Risk 55

Severity

2.9

EPSS

0.02%

First published (updated )

CVE-2026-5246

Cesanta MongooseCesanta Mongoose mDNS Record mongoose.c handle_mdns_record stack-based overflow

Risk 55

Severity

2.9

EPSS

0.08%

First published (updated )

CVE-2026-5245

Cesanta MongooseCesanta Mongoose TLS 1.3 mongoose.c mg_tls_recv_cert heap-based overflow

Risk 62

Severity

5.5

EPSS

0.08%

First published (updated )

CVE-2026-5244

Cesanta/MongooseCesanta Mongoose Poly1305 Authentication Tag tls_chacha20.c mg_chacha20_poly1305_decrypt signature verification

Risk 21

Severity

6.3

EPSS

0.01%

First published (updated )

CVE-2026-2968

Cesanta MongooseCesanta Mongoose TCP Sequence Number net_builtin.c getpeer verification of source

Risk 21

Severity

6.3

EPSS

0.14%

First published (updated )

CVE-2026-2967

Cesanta/MongooseCesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random values

Risk 21

Severity

6.3

EPSS

0.10%

First published (updated )

CVE-2026-2966

Cesanta MongooseNull Pointer Dereference

Risk 22

Severity

4.3

First published (updated )

CVE-2025-65502

Mongoose MongooseInteger Overflow, Buffer Overflow

Risk 43

Severity

7.5

First published (updated )

CVE-2025-51495

Cesanta FrozenNull Pointer Dereference

Risk 27

Severity

5.3

First published (updated )

CVE-2025-0696

Cesanta FrozenAn Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions les…

Risk 27

Severity

5.3

First published (updated )

CVE-2025-0695

Cesanta MongooseImproper Neutralization of Delimiters in Mongoose Web Server library

Risk 43

Severity

7.5

First published (updated )

CVE-2024-42392

Cesanta MongooseUse of Out-of-range Pointer Offset in Mongoose Web Server library

Risk 27

Severity

5.3

First published (updated )

CVE-2024-42391

Cesanta MongooseUse of Out-of-range Pointer Offset in Mongoose Web Server library

Risk 27

Severity

5.3

First published (updated )

CVE-2024-42390

Cesanta MongooseUse of Out-of-range Pointer Offset in Mongoose Web Server library

Risk 27

Severity

5.3

First published (updated )

CVE-2024-42389

Cesanta MongooseUse of Out-of-range Pointer Offset in Mongoose Web Server library

Risk 27

Severity

5.3

First published (updated )

CVE-2024-42388

Cesanta MongooseUse of Out-of-range Pointer Offset in Mongoose Web Server library

Risk 27

Severity

5.3

First published (updated )

CVE-2024-42387

Cesanta MongooseUse of Out-of-range Pointer Offset in Mongoose Web Server library

Risk 54

Severity

8.2

First published (updated )

CVE-2024-42386

Cesanta MongooseImproper Neutralization of Delimiters in Mongoose Web Server library

Risk 62

Severity

First published (updated )

CVE-2024-42385

Cesanta MongooseInteger Overflow or Wraparound in Mongoose Web Server library

Risk 43

Severity

7.5

First published (updated )

CVE-2024-42384

Cesanta MongooseUse of Out-of-range Pointer Offset in Mongoose Web Server library

Risk 86

Severity

9.8

First published (updated )

CVE-2024-42383

Cesanta MongooseNull Pointer Dereference

Risk 43

Severity

7.5

First published (updated )

CVE-2024-35492

Cesanta mJSAn issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_…

Risk 43

Severity

7.5

First published (updated )

CVE-2024-35386

Cesanta mJSAn issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_…

Risk 22

Severity

4.3

First published (updated )

CVE-2024-35385

Cesanta mJSInput Validation

Risk 40

Severity

5.5

First published (updated )

CVE-2024-35384

Cesanta mJSAn issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4…

Risk 43

Severity

7.5

First published (updated )

CVE-2023-49550

Cesanta mJSAn issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_get…

Risk 43

Severity

7.5

First published (updated )

CVE-2023-49549

Trending

Vendor Risk Score

Software

Cesanta MongooseCesanta Mongoose Out-of-Bounds Read in MG_TLS_BUILTIN ClientHello Session ID Parsing

Cesanta MongooseCesanta Mongoose GCM Authentication Tag tls_aes128.c mg_aes_gcm_decrypt signature verification

Cesanta MongooseCesanta Mongoose TCP Option net_builtin.c handle_opt infinite loop

Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices

Cesanta MongooseCesanta Mongoose P-384 Public Key mongoose.c mg_tls_verify_cert_signature authorization

Don't miss critical vulnerabilities

Cesanta MongooseCesanta Mongoose mDNS Record mongoose.c handle_mdns_record stack-based overflow

Cesanta MongooseCesanta Mongoose TLS 1.3 mongoose.c mg_tls_recv_cert heap-based overflow

Cesanta/MongooseCesanta Mongoose Poly1305 Authentication Tag tls_chacha20.c mg_chacha20_poly1305_decrypt signature verification

Cesanta MongooseCesanta Mongoose TCP Sequence Number net_builtin.c getpeer verification of source

Cesanta/MongooseCesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random values

Don't miss critical vulnerabilities

Cesanta MongooseNull Pointer Dereference

Mongoose MongooseInteger Overflow, Buffer Overflow

Cesanta FrozenNull Pointer Dereference

Cesanta FrozenAn Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions les…

Cesanta MongooseImproper Neutralization of Delimiters in Mongoose Web Server library

Don't miss critical vulnerabilities

Cesanta MongooseUse of Out-of-range Pointer Offset in Mongoose Web Server library

Cesanta MongooseUse of Out-of-range Pointer Offset in Mongoose Web Server library

Cesanta MongooseUse of Out-of-range Pointer Offset in Mongoose Web Server library

Cesanta MongooseUse of Out-of-range Pointer Offset in Mongoose Web Server library

Cesanta MongooseUse of Out-of-range Pointer Offset in Mongoose Web Server library

Don't miss critical vulnerabilities

Cesanta MongooseUse of Out-of-range Pointer Offset in Mongoose Web Server library

Cesanta MongooseImproper Neutralization of Delimiters in Mongoose Web Server library

Cesanta MongooseInteger Overflow or Wraparound in Mongoose Web Server library

Cesanta MongooseUse of Out-of-range Pointer Offset in Mongoose Web Server library

Cesanta MongooseNull Pointer Dereference

Don't miss critical vulnerabilities

Cesanta mJSAn issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_…

Cesanta mJSAn issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_…

Cesanta mJSInput Validation

Cesanta mJSAn issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4…

Cesanta mJSAn issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_get…

Don't miss critical vulnerabilities

Company

Resources

Contact