CVE-2026-73256 | Cesanta Mongoose up to 7.21 src/http.c http_cb request smuggling

August 20, 2026 Yanac

A vulnerability marked as problematic has been reported in Cesanta Mongoose up to 7.21. This vulnerability affects the function http_cb of the file src/http.c. The manipulation leads to http request smuggling.

This vulnerability is listed as CVE-2026-73256. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More