mongoose vulnerabilities and fixes

Recent CVEs affecting mongoose, with upgrade or downgrade steps. 14 tracked.

mongoose has 14 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 14. Most recent: 2026-08-20. Highest priority: CVE-2026-73257 (score 55/100).

• CVE-2026-5244 HIGH 7.3 UPGRADE A vulnerability has been found in Cesanta Mongoose up to 7.20
• CVE-2026-6985 MEDIUM 5.3 UPGRADE A weakness has been identified in Cesanta Mongoose up to 7.20
• CVE-2026-5246 MEDIUM 5.6 UPGRADE A vulnerability was determined in Cesanta Mongoose up to 7.20
• CVE-2026-5245 MEDIUM 5.6 UPGRADE A vulnerability was found in Cesanta Mongoose up to 7.20
• CVE-2026-6986 LOW 3.7 UPGRADE A security vulnerability has been detected in Cesanta Mongoose up to 7.20
• CVE-2026-42334 HIGH 7.5 UPGRADE Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment
• CVE-2026-73257 CRITICAL 9.1 UPGRADE Mongoose is an embedded web server and network library
• CVE-2026-73256 CRITICAL 9.1 UPGRADE Mongoose is an embedded web server and network library
• CVE-2026-73253 CRITICAL 9.1 UPGRADE Mongoose is an embedded web server and network library
• CVE-2026-73258 MEDIUM 6.5 UPGRADE Mongoose is an embedded web server and network library
• CVE-2026-73255 MEDIUM 6.5 UPGRADE Mongoose is an embedded web server and network library
• CVE-2026-73251 CRITICAL 9.1 UPGRADE Mongoose is an embedded web server and network library
• CVE-2026-73259 MEDIUM 5.4 UPGRADE Mongoose is an embedded web server and network library
• CVE-2026-73254 MEDIUM 5.4 UPGRADE Mongoose is an embedded web server and network library

FAQ

How do I fix mongoose vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mongoose being exploited right now?

None of the tracked mongoose CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mongoose CVE should I patch first?

CVE-2026-73257 currently ranks highest (55/100): Mongoose is an embedded web server and network library.

RSS feed for mongoose · ← Back to latest CVEs