CVE-2026-115473 | Cesanta Mongoose up to 7.21 Path Validation src/util.c mg_path_is_sane heap-based overflow

A vulnerability described as critical has been identified in Cesanta Mongoose up to 7.21. Affected is the function mg_path_is_sane of the file src/util.c of the component Path Validation. Executing a manipulation can lead to heap-based buffer overflow.

The identification of this vulnerability is CVE-2026-115473. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More