cesanta vulnerabilities
Recent CVEs affecting cesanta products. 13 tracked.
cesanta has 13 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 13. Most recent: 2026-08-20. Highest priority: CVE-2026-73257 (score 55/100).
- CVE-2026-5244 HIGH 7.3 UPGRADE A vulnerability has been found in Cesanta Mongoose up to 7.20
- CVE-2026-6985 MEDIUM 5.3 UPGRADE A weakness has been identified in Cesanta Mongoose up to 7.20
- CVE-2026-5246 MEDIUM 5.6 UPGRADE A vulnerability was determined in Cesanta Mongoose up to 7.20
- CVE-2026-5245 MEDIUM 5.6 UPGRADE A vulnerability was found in Cesanta Mongoose up to 7.20
- CVE-2026-6986 LOW 3.7 UPGRADE A security vulnerability has been detected in Cesanta Mongoose up to 7.20
- CVE-2026-73257 CRITICAL 9.1 UPGRADE Mongoose is an embedded web server and network library
- CVE-2026-73256 CRITICAL 9.1 UPGRADE Mongoose is an embedded web server and network library
- CVE-2026-73253 CRITICAL 9.1 UPGRADE Mongoose is an embedded web server and network library
- CVE-2026-73258 MEDIUM 6.5 UPGRADE Mongoose is an embedded web server and network library
- CVE-2026-73255 MEDIUM 6.5 UPGRADE Mongoose is an embedded web server and network library
- CVE-2026-73251 CRITICAL 9.1 UPGRADE Mongoose is an embedded web server and network library
- CVE-2026-73259 MEDIUM 5.4 UPGRADE Mongoose is an embedded web server and network library
- CVE-2026-73254 MEDIUM 5.4 UPGRADE Mongoose is an embedded web server and network library
FAQ
How do I fix cesanta vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cesanta being exploited right now?
None of the tracked cesanta CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cesanta CVE should I patch first?
CVE-2026-73257 currently ranks highest (55/100): Mongoose is an embedded web server and network library.