CVE-2026-86716

Cesanta mJS versions up to 1.26 contain a heap-based buffer overflow in the function skip_spaces_and_comments (file src/mjs_tok.c ). The flaw can be triggered remotely with no authentication required. The exploit has been publicly disclosed with proof-of-concept maturity, but the project has not ...