Vulnerabilidades em cesanta
46 resultadosAnálise Vexday
Cesanta apresenta 8 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando risco recente e em evolução. Embora 4 sejam críticas (CVSS alto), nenhuma está sob exploração ativa conhecida (KEV), reduzindo a urgência imediata. A fraqueza dominante é validação inadequada de certificados (CWE-295), típica de falhas em verificação TLS/SSL que podem comprometer a segurança de comunicações.
CVE-2026-73258MEDIUMMongoose: Multipart boundary/header scan logic error in mg_http_next_multipartEPSS 0.5%CVE-2026-2966MEDIUMCesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random valuesEPSS 0.4%CVE-2026-73256CRITICALMongoose: HTTP/1.0 detection off-by-one enables request smuggling via chunked TEEPSS 0.4%CVE-2026-73261HIGHMongoose: handle_opt() missing opts[1] > len check — 1-byte OOB read corrupts TCP MSS, silences mg_send() per connectionEPSS 0.4%CVE-2026-73259MEDIUMMongoose: Reflected XSS via decoded URI in directory listing renderEPSS 0.4%CVE-2018-25193HIGHMongoose Web Server 6.9 Denial of Service via Socket ConnectionEPSS 0.4%CVE-2025-0696MEDIUMA NULL Pointer Dereference vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embeEPSS 0.4%CVE-2024-42386HIGHUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.4%CVE-2025-0695MEDIUMAn Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce EPSS 0.4%CVE-2026-73252HIGHMongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAXEPSS 0.4%CVE-2026-73254MEDIUMMongoose: Stored XSS via unescaped filenames in directory listingEPSS 0.3%CVE-2026-73253CRITICALMongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard MatchingEPSS 0.3%CVE-2024-42388MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2024-42389MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2024-42387MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2024-42391MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2024-42390MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2024-42383MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2026-115473MEDIUMMongoose: Heap OOB reads and null-byte bypass in mg_path_is_sane (util.c)EPSS 0.3%CVE-2026-2968MEDIUMCesanta Mongoose Poly1305 Authentication Tag tls_chacha20.c mg_chacha20_poly1305_decrypt signature verificationEPSS 0.3%