{"schema_version":1,"title":"Cesanta Mongoose vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in Cesanta Mongoose: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-115473, was published on 4 November 2026. 5 vulnerabilities in the last four weeks, up 400% on the four before (1).","url":"https://junglewise.ai/threats/technologies/cesanta-mongoose","json_url":"https://junglewise.ai/threats/technologies/cesanta-mongoose.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/cesanta-mongoose","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":5,"all_time":11,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":5,"last_90_days":6,"last_365_days":11},"latest":[{"cve":"CVE-2026-115473","cvss":6.5,"slug":"cve-2026-115473-mongoose-is-an-embedded-web-server-and-network-library-prior-to","title":"Mongoose heap out-of-bounds read in path validation","severity":"medium","exploited":false,"published_at":"2026-11-04T22:17:50.503+00:00","url":"https://junglewise.ai/threats/cve-2026-115473-mongoose-is-an-embedded-web-server-and-network-library-prior-to"},{"cve":"CVE-2026-73261","cvss":7.5,"epss":0.0035,"slug":"cve-2026-73261-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7","title":"Mongoose TCP option parser bounds check vulnerability","severity":"high","exploited":false,"published_at":"2026-10-14T19:17:19.99+00:00","url":"https://junglewise.ai/threats/cve-2026-73261-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7"},{"cve":"CVE-2026-73260","cvss":7.5,"epss":0.0023,"slug":"cve-2026-73260-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7","title":"Mongoose TLS certificate parser bounds check in DER parsing","severity":"high","exploited":false,"published_at":"2026-10-14T19:17:19.84+00:00","url":"https://junglewise.ai/threats/cve-2026-73260-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7"},{"cve":"CVE-2026-73252","cvss":7.5,"epss":0.0038,"slug":"cve-2026-73252-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7","title":"Mongoose TLS short-record out-of-bounds read","severity":"high","exploited":false,"published_at":"2026-10-14T19:17:19.667+00:00","url":"https://junglewise.ai/threats/cve-2026-73252-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7"},{"cve":"CVE-2026-63626","cvss":8.8,"epss":0.0024,"slug":"cve-2026-63626-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7","title":"Mongoose IPv6CP length field bounds check buffer overflow","severity":"high","exploited":false,"published_at":"2026-10-14T19:17:18.57+00:00","url":"https://junglewise.ai/threats/cve-2026-63626-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7"},{"cve":"CVE-2026-101003","cvss":5.3,"slug":"cve-2026-101003-a-weakness-has-been-identified-in-cesanta-mongoose-up-to-7-21","title":"Cesanta Mongoose stack-based buffer overflow in MQTT broker","severity":"medium","exploited":false,"published_at":"2026-09-28T06:16:31.31+00:00","url":"https://junglewise.ai/threats/cve-2026-101003-a-weakness-has-been-identified-in-cesanta-mongoose-up-to-7-21"},{"cve":"CVE-2026-6986","cvss":3.7,"epss":0.0022,"slug":"cve-2026-6986-a-security-vulnerability-has-been-detected-in-cesanta-mongoose-up","title":"A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function…","severity":"low","exploited":false,"published_at":"2026-04-25T17:16:33.7+00:00","url":"https://junglewise.ai/threats/cve-2026-6986-a-security-vulnerability-has-been-detected-in-cesanta-mongoose-up"},{"cve":"CVE-2026-6985","cvss":5.3,"epss":0.0057,"slug":"cve-2026-6985-a-weakness-has-been-identified-in-cesanta-mongoose-up-to-7-20-this","title":"A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects the function handle_opt of…","severity":"medium","exploited":false,"published_at":"2026-04-25T17:16:33.52+00:00","url":"https://junglewise.ai/threats/cve-2026-6985-a-weakness-has-been-identified-in-cesanta-mongoose-up-to-7-20-this"},{"cve":"CVE-2026-5246","cvss":5.6,"epss":0.0062,"slug":"cve-2026-5246-a-vulnerability-was-determined-in-cesanta-mongoose-up-to-7-20","title":"A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mg_tls_verify_cert_signature…","severity":"medium","exploited":false,"published_at":"2026-04-02T10:16:17.763+00:00","url":"https://junglewise.ai/threats/cve-2026-5246-a-vulnerability-was-determined-in-cesanta-mongoose-up-to-7-20"},{"cve":"CVE-2026-5245","cvss":5.6,"epss":0.0072,"slug":"cve-2026-5245-a-vulnerability-was-found-in-cesanta-mongoose-up-to-7-20-this","title":"A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_record of the file…","severity":"medium","exploited":false,"published_at":"2026-04-02T10:16:17.443+00:00","url":"https://junglewise.ai/threats/cve-2026-5245-a-vulnerability-was-found-in-cesanta-mongoose-up-to-7-20-this"},{"cve":"CVE-2026-5244","cvss":7.3,"epss":0.0073,"slug":"cve-2026-5244-a-vulnerability-has-been-found-in-cesanta-mongoose-up-to-7-20-this","title":"A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mg_tls_recv_cert of the file…","severity":"high","exploited":false,"published_at":"2026-04-02T08:16:28.683+00:00","url":"https://junglewise.ai/threats/cve-2026-5244-a-vulnerability-has-been-found-in-cesanta-mongoose-up-to-7-20-this"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Cesanta Mongoose","slug":"cesanta-mongoose","vendor":{"hub":true,"name":"Cesanta","slug":"cesanta","url":"https://junglewise.ai/threats/vendors/cesanta"},"aliases":[],"category":"library","description":"Lightweight embedded web server library for building networked applications.","url":"https://junglewise.ai/threats/technologies/cesanta-mongoose"},"most_severe":[{"cve":"CVE-2026-63626","cvss":8.8,"epss":0.0024,"slug":"cve-2026-63626-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7","title":"Mongoose IPv6CP length field bounds check buffer overflow","severity":"high","exploited":false,"published_at":"2026-10-14T19:17:18.57+00:00","url":"https://junglewise.ai/threats/cve-2026-63626-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7"},{"cve":"CVE-2026-73252","cvss":7.5,"epss":0.0038,"slug":"cve-2026-73252-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7","title":"Mongoose TLS short-record out-of-bounds read","severity":"high","exploited":false,"published_at":"2026-10-14T19:17:19.667+00:00","url":"https://junglewise.ai/threats/cve-2026-73252-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7"},{"cve":"CVE-2026-73261","cvss":7.5,"epss":0.0035,"slug":"cve-2026-73261-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7","title":"Mongoose TCP option parser bounds check vulnerability","severity":"high","exploited":false,"published_at":"2026-10-14T19:17:19.99+00:00","url":"https://junglewise.ai/threats/cve-2026-73261-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7"},{"cve":"CVE-2026-73260","cvss":7.5,"epss":0.0023,"slug":"cve-2026-73260-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7","title":"Mongoose TLS certificate parser bounds check in DER parsing","severity":"high","exploited":false,"published_at":"2026-10-14T19:17:19.84+00:00","url":"https://junglewise.ai/threats/cve-2026-73260-mongoose-is-an-embedded-web-server-and-network-library-prior-to-7"},{"cve":"CVE-2026-5244","cvss":7.3,"epss":0.0073,"slug":"cve-2026-5244-a-vulnerability-has-been-found-in-cesanta-mongoose-up-to-7-20-this","title":"A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mg_tls_recv_cert of the file…","severity":"high","exploited":false,"published_at":"2026-04-02T08:16:28.683+00:00","url":"https://junglewise.ai/threats/cve-2026-5244-a-vulnerability-has-been-found-in-cesanta-mongoose-up-to-7-20-this"},{"cve":"CVE-2026-115473","cvss":6.5,"slug":"cve-2026-115473-mongoose-is-an-embedded-web-server-and-network-library-prior-to","title":"Mongoose heap out-of-bounds read in path validation","severity":"medium","exploited":false,"published_at":"2026-11-04T22:17:50.503+00:00","url":"https://junglewise.ai/threats/cve-2026-115473-mongoose-is-an-embedded-web-server-and-network-library-prior-to"},{"cve":"CVE-2026-5245","cvss":5.6,"epss":0.0072,"slug":"cve-2026-5245-a-vulnerability-was-found-in-cesanta-mongoose-up-to-7-20-this","title":"A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_record of the file…","severity":"medium","exploited":false,"published_at":"2026-04-02T10:16:17.443+00:00","url":"https://junglewise.ai/threats/cve-2026-5245-a-vulnerability-was-found-in-cesanta-mongoose-up-to-7-20-this"},{"cve":"CVE-2026-5246","cvss":5.6,"epss":0.0062,"slug":"cve-2026-5246-a-vulnerability-was-determined-in-cesanta-mongoose-up-to-7-20","title":"A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mg_tls_verify_cert_signature…","severity":"medium","exploited":false,"published_at":"2026-04-02T10:16:17.763+00:00","url":"https://junglewise.ai/threats/cve-2026-5246-a-vulnerability-was-determined-in-cesanta-mongoose-up-to-7-20"},{"cve":"CVE-2026-6985","cvss":5.3,"epss":0.0057,"slug":"cve-2026-6985-a-weakness-has-been-identified-in-cesanta-mongoose-up-to-7-20-this","title":"A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects the function handle_opt of…","severity":"medium","exploited":false,"published_at":"2026-04-25T17:16:33.52+00:00","url":"https://junglewise.ai/threats/cve-2026-6985-a-weakness-has-been-identified-in-cesanta-mongoose-up-to-7-20-this"},{"cve":"CVE-2026-101003","cvss":5.3,"slug":"cve-2026-101003-a-weakness-has-been-identified-in-cesanta-mongoose-up-to-7-21","title":"Cesanta Mongoose stack-based buffer overflow in MQTT broker","severity":"medium","exploited":false,"published_at":"2026-09-28T06:16:31.31+00:00","url":"https://junglewise.ai/threats/cve-2026-101003-a-weakness-has-been-identified-in-cesanta-mongoose-up-to-7-21"}],"generated_at":"2026-11-12T03:07:00.164048+00:00"}