Known Vulnerabilities for products from Cesanta
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Cesanta".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-86716 json | Not Provided | 2026-09-08 | 2026-09-08 | |
| CVE-2026-11404 json | Not Provided | 2026-07-09 | 2026-08-29 | |
| CVE-2026-6986 json | A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mg_aes_gcm_decrypt... | Not Provided | 2026-04-25 | 2026-04-29 |
| CVE-2026-6985 json | A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects the function handle_opt of the file... | Not Provided | 2026-04-25 | 2026-04-29 |
| CVE-2026-5246 json | A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mg_tls_verify_cert_signature of the f... | Not Provided | 2026-04-02 | 2026-04-29 |
| CVE-2026-5245 json | A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_record of the file mongoose.c... | Not Provided | 2026-04-02 | 2026-04-29 |
| CVE-2026-5244 json | A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mg_tls_recv_cert of the file mongoos... | Not Provided | 2026-04-02 | 2026-04-29 |
| CVE-2026-2968 json | A vulnerability was detected in Cesanta Mongoose up to 7.20. This impacts the function mg_chacha20_poly1305_decrypt of the fi... | Not Provided | 2026-02-23 | 2026-04-29 |
| CVE-2026-2967 json | A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src... | Not Provided | 2026-02-23 | 2026-04-29 |
| CVE-2026-2966 json | A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mg_sendnsreq of the file ... | Not Provided | 2026-02-23 | 2026-04-29 |
| CVE-2024-42392 json | Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop b... | Not Provided | 2024-11-18 | 2026-09-08 |
| CVE-2024-42391 json | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpecte... | Not Provided | 2024-11-18 | 2026-09-08 |
| CVE-2024-42386 json | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpecte... | Not Provided | 2024-11-18 | 2026-09-08 |
| CVE-2024-42385 json | Not Provided | 2024-11-18 | 2026-09-08 | |
| CVE-2024-42384 json | Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TL... | Not Provided | 2024-11-18 | 2026-09-08 |
| CVE-2023-49551 json | 7.5 - HIGH | 2024-01-02 | 2024-01-05 | |
| CVE-2023-49550 json | 7.5 - HIGH | 2024-01-02 | 2024-01-05 | |
| CVE-2023-43338 json | Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjs_get_ptr(). This... | 9.8 - CRITICAL | 2023-09-23 | 2023-09-26 |
| CVE-2023-34188 json | The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. By sending a single atta... | 7.5 - HIGH | 2023-06-23 | 2023-09-06 |
| CVE-2023-30088 json | An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs... | 5.5 - MEDIUM | 2023-05-09 | 2023-05-15 |
Known software with vulnerabilities from Cesanta
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Cesanta | Mongoose | 3.2 |
| Application | Cesanta | Mongoose Embedded Web Server Library | 3.2 |