Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects the function handle_opt of the file /src/net_builtin.c of the component TCP Option Handler. This manipulation of the argument optlen causes infinite loop. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 7.21 is able to resolve this issue. Upgrading the affected component is advised. VulDB has contacted the vendor early and they confirmed quickly, that this issue got fixed already.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-6985 A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects the function handle_opt of the file /src/net_builtin.c of the component TCP Op… https://www.cve.org/CVERecord?id=CVE-2026-6985
Post summary
CVE-2026-6985 is a newly disclosed weakness in Cesanta Mongoose up to v7.20 that impacts the handle_opt function in net_builtin.c; no exploit, patch, or PoC information is provided.
CVE-2026-6985 Remote Denial of Service via Infinite Loop in Cesanta Mongoose TCP Option Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6985
Post summary
The post announces CVE‑2026‑6985, a remote denial‑of‑service vulnerability caused by an infinite loop in Cesanta Mongoose’s TCP option handler, without providing PoC, exploit code, or active exploitation evidence.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | cesanta | mongoose | - | - | - |