Known vulnerabilities in Mongoose 7.21

Software: Mongoose
Version: 7.21
Software CPE: cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Mongoose version 7.21 Mongoose 7.21 is affected by 13 vulnerabilities: 5 high, 7 medium, 1 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142195 - Improper Certificate Validation
CVE-2026-73253
CWE-295 High
No
No
7.22 12.08.2026 SB20260812412
#VU142194 - Out-of-bounds read
CVE-2026-52068
CWE-125 Medium
No
No
7.22 12.08.2026 SB20260812412
#VU142193 - Out-of-bounds read
CVE-2026-52061
CWE-125 High
No
No
7.22 12.08.2026 SB20260812412
#VU142192 - Out-of-bounds read
CVE-2026-52053
CWE-125 Medium
No
No
7.22 12.08.2026 SB20260812412
#VU142190 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-73254
CWE-79 Medium
No
No
7.22 12.08.2026 SB20260812412
#VU142189 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-73255
CWE-22 Low
No
No
7.22 12.08.2026 SB20260812412
#VU142188 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-73256
CWE-444 High
No
No
7.22 12.08.2026 SB20260812412
#VU142187 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-73257
CWE-444 High
No
No
7.22 12.08.2026 SB20260812412
#VU142186 - Incorrect Comparison
CVE-2026-73258
CWE-697 Medium
No
No
7.22 12.08.2026 SB20260812412
#VU142185 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-73259
CWE-79 Medium
No
No
7.22 12.08.2026 SB20260812412
#VU142184 - Out-of-bounds read
CVE-2026-73261
CWE-125 Medium
No
No
7.23 12.08.2026 SB20260812411
#VU142183 - Heap-based Buffer Overflow
CVE-2026-63626
CWE-122 High
No
No
7.23 12.08.2026 SB20260812411
#VU142181 - Out-of-bounds read
CVE-2026-73252
CWE-125 Medium
No
No
7.23 12.08.2026 SB20260812411