mongoose vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

MO

Product

mongoose

by cesanta · last CVE Oct 14, 2026

61

CVEs

0

On KEV

9.8

Max CVSS

4

New 30D

Vulnerabilities61 In the news1 Timeline

Severity mix

Critical 23High 22Medium 12Low 4

Severity

All severities61 Critical23 High22 Medium12 Low4

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add mongoose to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-6986	3.7	0%	Apr 25	Cesanta Mongoose GCM Authentication Tag tls_aes128.c mg_aes_gcm_decrypt signature verification Affected: 7.0; 7.1; 7.2; 7.3; 7.4; 7.5; +15 more
CVE-2026-2968	3.7	0%	Feb 23	Cesanta Mongoose Poly1305 Authentication Tag tls_chacha20.c mg_chacha20_poly1305_decrypt signature verification Affected: 7.0; 7.1; 7.2; 7.3; 7.4; 7.5; +15 more
CVE-2026-2967	3.7	1%	Feb 23	Cesanta Mongoose TCP Sequence Number net_builtin.c getpeer verification of source Affected: 7.0; 7.1; 7.2; 7.3; 7.4; 7.5; +15 more
CVE-2026-2966	3.7	0%	Feb 23	Cesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random values Affected: 7.0; 7.1; 7.2; 7.3; 7.4; 7.5; +15 more