CVE-2026-5246General(cesanta / mongoose)

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mg_tls_verify_cert_signature of the file mongoose.c of the component P-384 Public Key Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. Attacks of this nature are highly complex. The exploitability is told to be difficult. The exploit has been publicly disclosed and may be utilized. Upgrading to version 7.21 is able to address this issue. This patch is called 0d882f1b43ff2308b7486a56a9d60cd6dba8a3f1. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

cesanta CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/cesanta/mongoose/commit/0d882f1b43ff2308b7486a56a9d60cd6dba8a3f1

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-285CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

mongoose

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 1 signal
General: 1 classified signal
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-03-31); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

cesanta

Products

mongoose

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

General

150.0%

Disclosure

150.0%

Classification over time

Date	Total	Labels

2026-03-31	1	General1
2026-04-02	1	Disclosure1

Full discourse2 posts

Simone Margaritelli@evilsocket189d
Disclosure
Mongoose network library <= 7.20 CVE-2026-5244 - mg_tls_recv_cert pubkey heap-based overflow (exploitable) CVE-2026-5245 - mDNS Record stack-based overflow (exploitable) CVE-2026-5246 - authorization bypass via P-384 Public Key (trivially exploitable) Fun ride. https://t.co/KUBymdWrJF
Post summary
The tweet discloses three CVEs in the Mongoose library, describing the vulnerability types and stating they are exploitable, but offers no PoC, exploitation evidence, or mitigation information.
2101401524.5K
47.9K followersView on X
Simone Margaritelli@evilsocket191d
General
CVE-2026-5244, CVE-2026-5245 and CVE-2026-5246 🥳🎉
Post summary
The statement merely lists three CVE identifiers without providing any functional proof of concept, exploitation details, patches, or other context.
1002246.7K
47.9K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	cesanta	mongoose	-	-	-

Explore more

Back to dashboard cesanta CVEs mongoose vulnerabilities