CVE-2026-63626 | Cesanta Mongoose up to 7.22 PPP IPv6CP src/l2_ppp.c ppp_handle_ipv6cp len buffer overflow

October 14, 2026 Yanac

A vulnerability labeled as critical has been found in Cesanta Mongoose up to 7.22. Impacted is the function ppp_handle_ipv6cp of the file src/l2_ppp.c of the component PPP IPv6CP. Executing a manipulation of the argument len can lead to buffer overflow.

The identification of this vulnerability is CVE-2026-63626. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More