CVE-2026-2966

A flaw was found in Cesanta Mongoose. A remote attacker could exploit a weakness in the mgsendnsreq function within the DNS Transaction ID Handler component. By manipulating the random argument, an attacker can cause the generation of insufficiently random values. This vulnerability can lead to...