CVE-2026-5245Disclosure(cesanta / mongoose)

LOWCVSS 8.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_record of the file mongoose.c of the component mDNS Record Handler. Performing a manipulation of the argument buf results in stack-based buffer overflow. Remote exploitation of the attack is possible. A high degree of complexity is needed for the attack. The exploitability is said to be difficult. The exploit has been made public and could be used. Upgrading to version 7.21 will fix this issue. The patch is named 0d882f1b43ff2308b7486a56a9d60cd6dba8a3f1. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

cesanta CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/cesanta/mongoose/commit/0d882f1b43ff2308b7486a56a9d60cd6dba8a3f1

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

mongoose

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 1 signal
Disclosure: 2 classified signals
General: 1 classified signal
Peaked at 2 mentions on most recent observed day (2026-04-02)
3 total mentions across 2 days

Affected systems

Vendors

cesanta

Products

mongoose

Deep dive

Activity timeline3 mentions / 2d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-5245

Classification over time

Date	Total	Labels

2026-03-31	1	General1
2026-04-02	2	Disclosure2

Full discourse3 posts

Simone Margaritelli@evilsocket189d
Disclosure
Mongoose network library <= 7.20 CVE-2026-5244 - mg_tls_recv_cert pubkey heap-based overflow (exploitable) CVE-2026-5245 - mDNS Record stack-based overflow (exploitable) CVE-2026-5246 - authorization bypass via P-384 Public Key (trivially exploitable) Fun ride. https://t.co/KUBymdWrJF
Post summary
A tweet announces three new CVEs affecting the Mongoose network library (≤7.20), describing heap/stack overflows and an authorization bypass, and provides a link for further details.
2101401524.5K
47.9K followersView on X
Simone Margaritelli@evilsocket191d
General
CVE-2026-5244, CVE-2026-5245 and CVE-2026-5246 🥳🎉
Post summary
The text merely lists three CVE identifiers with celebratory emojis, providing no additional information about the vulnerabilities.
1002246.7K
47.9K followersView on X
CVE@CVEnew189d
Disclosure
CVE-2026-5245 A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_record of the file mongoose.c of the component mDNS Record Handler. Perf… https://www.cve.org/CVERecord?id=CVE-2026-5245
Post summary
A CVE (CVE-2026-5245) has been identified in Cesanta Mongoose versions up to 7.20, impacting the handle_mdns_record function in the mDNS Record Handler component. No additional details on exploitation or mitigation are provided.
0000072
56.9K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	cesanta	mongoose	-	-	-

Explore more

Back to dashboard cesanta CVEs mongoose vulnerabilities