Lucene search
K

9 matches found

OSV
OSV
added 2026/04/30 7:30 p.m.6 views

JLSEC-2026-366 A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the...

A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mgsendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. Executing a manipulation of the argument random can lead to insufficiently random values. The attack can be launched...

6.3CVSS4.5AI score0.0038EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2026/02/24 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-2966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mgsendnsreq of the file /src/dns.c of the component DNS...

6.3CVSS5.2AI score0.0038EPSS
Exploits1References3
OSV
OSV
added 2026/02/23 3:15 a.m.7 views

CVE-2026-2966

A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mgsendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. Executing a manipulation of the argument random can lead to insufficiently random values. The attack can be launched...

3.7CVSS4.9AI score
Exploits0References5
OSV
OSV
added 2026/02/23 3:15 a.m.4 views

DEBIAN-CVE-2026-2966

A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mgsendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. Executing a manipulation of the argument random can lead to insufficiently random values. The attack can be launched...

6.3CVSS5.2AI score0.0038EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/02/23 2:2 a.m.27 views

CVE-2026-2966 Cesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random values

A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mgsendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. Executing a manipulation of the argument random can lead to insufficiently random values. The attack can be launched...

6.3CVSS0.0038EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/02/23 2:2 a.m.5 views

CVE-2026-2966

A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mgsendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. Executing a manipulation of the argument random can lead to insufficiently random values. The attack can be launched...

6.3CVSS4.7AI score0.0038EPSS
Exploits1References5Affected Software1
Debian CVE
Debian CVE
added 2026/02/23 2:2 a.m.8 views

CVE-2026-2966

A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mgsendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. Executing a manipulation of the argument random can lead to insufficiently random values. The attack can be launched...

6.3CVSS4.5AI score0.0038EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2026/02/23 12:0 a.m.3 views

CVE-2026-2966

A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mgsendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. Executing a manipulation of the argument random can lead to insufficiently random values. The attack can be launched...

6.3CVSS5.5AI score0.0038EPSS
Exploits1References6
CNNVD
CNNVD
added 2026/02/23 12:0 a.m.7 views

Cesanta Mongoose 安全特征问题漏洞

Cesanta Mongoose is a set of embedded server libraries developed by the Irish company Cesanta. It includes functions for TCP and HTTP clients and servers, as well as WenSocket clients and servers. Versions of Cesanta Mongoose 7.20 and earlier contained security vulnerabilities. These...

6.3CVSS5.8AI score0.0038EPSS
Exploits1References5
Rows per page
Query Builder