https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T00:23:22.136147+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-194669 EUVD-2026-194669 2026-10-08T00:23:22.139206+00:00 EUVD-2026-194669 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2905 fkie_cve-2023-2905 2026-10-08T00:23:22.139251+00:00

Due to a failure in validating the length of a provided MQTT_CMD_PUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddable web server, version 7.10 is susceptible to a heap-based buffer overflow vulnerability in the default configuration. Version 7.9 and prior does not appear to be vulnerable. This issue is resolved in version 7.11.

 https://cve.radiocsirt.org/vuln/ghsa-pv78-3m65-h826 GHSA-pv78-3m65-h826 2026-10-08T00:23:22.139283+00:00

Due to a failure in validating the length of a provided MQTT_CMD_PUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddable web server, version 7.10 is susceptible to a heap-based buffer overflow vulnerability in the default configuration. Version 7.9 and prior does not appear to be vulnerable. This issue is resolved in version 7.11.

 https://cve.radiocsirt.org/vuln/gsd-2023-2905 gsd-2023-2905 2026-10-08T00:23:22.139302+00:00 gsd-2023-2905 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-2905 UBUNTU-CVE-2023-2905 2026-10-08T00:23:22.139313+00:00

Affected: Ubuntu:22.04:LTS: swupdate, Ubuntu:24.04:LTS: swupdate

Due to a failure in validating the length of a provided MQTT_CMD_PUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddable web server, version 7.10 is susceptible to a heap-based buffer overflow vulnerability in the default configuration. Version 7.9 and prior does not appear to be vulnerable. This issue is resolved in version 7.11.