https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T13:57:07.793520+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-2905 CVE-2023-2905 — Cesanta Mongoose MQTT Message Parsing Heap Overflow 2026-10-08T13:57:07.809951+00:00

Affected: Cesanta Mongoose

Due to a failure in validating the length of a provided MQTT_CMD_PUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddable web server, version 7.10 is susceptible to a heap-based buffer overflow vulnerability in the default configuration. Version 7.9 and prior does not appear to be vulnerable. This issue is resolved in version 7.11.