CVE-2026-73251

creationtimestamp| type| source ---|---|--- 2026-08-20 20:08:05+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtk2dy7ijg25 2026-08-22 05:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtnldkq5zo2c...

CVE-2026-73251

Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server to a Mongoose client configured with a multi-certificate CA bundle. In src/tlsbuiltin.c, the mgtlsinit function stores the bundle in tls-cabundleder while tls-cader.len remains...

CVE-2026-73251 Mongoose Built-in TLS: CA-bundle certificate chain accepted without any signature verification

Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server to a Mongoose client configured with a multi-certificate CA bundle. In src/tlsbuiltin.c, the mgtlsinit function stores the bundle in tls-cabundleder while tls-cader.len remains...