CVE-2026-73259

CVE-2026-73259 is a reflected cross-site scripting (XSS) vulnerability in Mongoose , an embedded web server and network library, affecting versions prior to 7.22 . The flaw resides in the mg_http_serve_dir() and listdir() functions in src/http.c, which insert a percent-decoded request URI into th...