Vulnerabilities in Cesanta
46 resultsCVE-2024-42392MEDIUMImproper Neutralization of Delimiters in Mongoose Web Server libraryEPSS 0.2%CVE-2026-63626HIGHMongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6)EPSS 0.2%CVE-2026-73260HIGHMongoose: Out-of-bounds Read via length-counter underflow in built-in TLS X.509 DER parserEPSS 0.2%CVE-2026-6986MEDIUMCesanta Mongoose GCM Authentication Tag tls_aes128.c mg_aes_gcm_decrypt signature verificationEPSS 0.2%CVE-2026-73251CRITICALMongoose Built-in TLS: CA-bundle certificate chain accepted without any signature verificationEPSS 0.2%CVE-2024-42385MEDIUMImproper Neutralization of Delimiters in Mongoose Web Server libraryEPSS 0.1%