JLSEC-2026-367 A security vulnerability has been detected in Cesanta Mongoose up to 7.20

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP Sequence Number Handler. The manipulation leads to improper verification of source of a communication channel. The attack may be initiate...

DEBIAN-CVE-2026-2967

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP Sequence Number Handler. The manipulation leads to improper verification of source of a communication channel. The attack may be initiate...

UBUNTU-CVE-2026-2967

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP Sequence Number Handler. The manipulation leads to improper verification of source of a communication channel. The attack may be initiate...

PT-2026-21494

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose versions prior to 7.21 Description A security issue exists in Cesanta Mongoose. The getpeer function within the TCP Sequence Number Handler component, located in /src/net builtin.c, does not properly verify the source of a...

CVE-2026-2967

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP Sequence Number Handler. The manipulation leads to improper verification of source of a communication channel. The attack may be initiate...

Cesanta Mongoose 安全漏洞

Cesanta Mongoose is a set of embedded server libraries developed by the Irish company Cesanta. It includes functions for TCP and HTTP clients and servers, as well as WenSocket clients and servers. Versions of Cesanta Mongoose 7.20 and earlier contained security vulnerabilities. These...

CVE-2026-2967: Improper Verification of Source of a Communication Channel

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP Sequence Number Handler. The manipulation leads to improper verification of source of a communication channel. The attack may be initiate...

The vulnerability of the TCP Initial Sequence Number Handler component in the Tianocore EDK2 library, which allows a hacker to gain unauthorized access to confidential data

The vulnerability of the TCP Initial Sequence Number Handler component in the Tianocore EDK2 library is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to confidential data...