en
Cesanta Software Ltd is an embedded-software company headquartered in Dublin, Ireland. It builds networking and Internet of Things software and hardware for connected products, with an emphasis on helping embedded-device developers add network connectivity, web interfaces, and device-management capabilities.
As of 10/22/2026, cesanta recorded 14 security vulnerabilities in the last 90 days across 2 products, including 8 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, mongoose had the most security vulnerabilities in the cesanta ecosystem, with 13 vulnerabilities—approximately 92.86% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-63626Mongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6)CVE-2026-73261Mongoose: handle_opt() missing opts[1] > len check — 1-byte OOB read corrupts TCP MSS, silences mg_send() per connectionCVE-2026-73260Mongoose: Out-of-bounds Read via length-counter underflow in built-in TLS X.509 DER parserCVE-2026-73252Mongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAXCVE-2026-101003Cesanta Mongoose MQTT Broker main.c fn stack-based overflow155 Results | Page 1 of 16
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityCritical |
| SeverityMedium |
| SeverityMedium |
| SeverityCritical |