CVE-2026-73260 | Cesanta Mongoose up to 7.22 TLS Certificate Parser mg_der_to_tlv/mg_der_next out-of-bounds

A vulnerability described as problematic has been identified in Cesanta Mongoose up to 7.22. The impacted element is the function mg_der_to_tlv/mg_der_next of the component TLS Certificate Parser. The manipulation results in out-of-bounds read.

This vulnerability is identified as CVE-2026-73260. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More