CVE-2026-86716 | Cesanta mJS up to 1.26 src/mjs_tok.c skip_spaces_and_comments heap-based overflow (Issue 324)

A vulnerability, which was classified as critical, was found in Cesanta mJS up to 1.26. Affected is the function skip_spaces_and_comments of the file src/mjs_tok.c. Executing a manipulation can lead to heap-based buffer overflow.

This vulnerability is tracked as CVE-2026-86716. The attack can be launched remotely. Moreover, an exploit is present.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More