Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mg_aes_gcm_decrypt of the file /src/tls_aes128.c of the component GCM Authentication Tag Handler. Such manipulation leads to improper verification of cryptographic signature. The attack may be performed from remote. A high complexity level is associated with this attack. The exploitability is assessed as difficult. The exploit has been disclosed publicly and may be used. Upgrading to version 7.21 is capable of addressing this issue. It is advisable to upgrade the affected component. VulDB has contacted the vendor early and they confirmed quickly, that this issue got fixed already.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-6986 A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mg_aes_gcm_decrypt of the file /src/tls_aes128.c of the compo… https://www.cve.org/CVERecord?id=CVE-2026-6986
Post summary
The note announces CVE‑2026‑6986 in Cesanta Mongoose, providing minimal technical details but lacking PoC, exploit or patch information.
CVE-2026-6986 Improper Cryptographic Signature Verification in Cesanta Mongoose GCM Authentication Tag Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6986
Post summary
The post merely references CVE‑2026‑6986 with a short technical description and a link, offering no exploit details or mitigation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | cesanta | mongoose | - | - | - |