Products: 6
    Vulnerabilities: 154
    Known Exploited: 0
    25
    Critical Level Threats
    42
    High Level Threats
    83
    Medium Level Threats
    4
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-115473

    Mongoose: Heap OOB reads and null-byte bypass in mg_path_is_sane (util.c)

    Last Modified: Nov 04, 2026
    Published: Nov 04, 2026

    CVE-2026-63626

    Mongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6)

    Last Modified: Oct 22, 2026
    Published: Oct 14, 2026

    CVE-2026-73261

    Mongoose: handle_opt() missing opts[1] > len check — 1-byte OOB read corrupts TCP MSS, silences mg_send() per connection

    Last Modified: Oct 29, 2026
    Published: Oct 14, 2026

    CVE-2026-73260

    Mongoose: Out-of-bounds Read via length-counter underflow in built-in TLS X.509 DER parser

    Last Modified: Oct 22, 2026
    Published: Oct 14, 2026

    CVE-2026-73252

    Mongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAX

    Last Modified: Oct 22, 2026
    Published: Oct 14, 2026
    Items Per Page
    Cesanta Vulnerabilities & Security CVEs | CVE-DB