CVE WATCH / VULNERABILITY DETAIL
CVE-2026-73252
HIGHCVSS 7.5NVD feed
Published 14 October 2026 · tracked since 15 October 2026
Description
Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS stack selected by MG_TLS_BUILTIN in src/tls_builtin.c accepts a TLS 1.3 record whose decrypted size is exactly the 16-byte authentication tag with no plaintext or ContentType byte. In mg_tls_recv_record(), the ms
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110923 MEDIUM 6.5
- CVE-2026-3712 HIGH 7.3
- CVE-2026-14572 MEDIUM 6.4
- CVE-2026-108587 CRITICAL 9.8
- CVE-2026-110911 CRITICAL 9.8
- CVE-2026-77931 HIGH 8.8
- CVE-2026-109430 HIGH 7.5
- CVE-2026-21589
- CVE-2026-110872 MEDIUM 5.9
- CVE-2026-110869 HIGH 7.5