How many Cesanta Mongoose Web Server CVEs are in CISA KEV?

None of Cesanta Mongoose Web Server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Cesanta Mongoose Web Server vulnerabilities?

Yes — 1 of Cesanta Mongoose Web Server's CVEs have a known public exploit.

Which versions of Cesanta Mongoose Web Server are affected?

3 distinct Cesanta Mongoose Web Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Cesanta Mongoose Web Server CVEs?

Cesanta Mongoose Web Server's CVEs most often map to these CWE weakness types: CWE-823 (Use of Out-of-range Pointer Offset), CWE-140 (Improper Neutralization of Delimiters), CWE-1188 (Initialization of a Resource with an Insecure Default), CWE-190 (Integer Overflow or Wraparound).

How many critical Cesanta Mongoose Web Server vulnerabilities are there?

Cesanta Mongoose Web Server has 1 critical and 5 high-severity CVEs.

What is the average severity of Cesanta Mongoose Web Server CVEs?

The average CVSS base score across Cesanta Mongoose Web Server's scored CVEs is 6.8.

RadicalNotion.AI

Log in Start free

Cesanta

11 CVEs

Cesanta Mongoose Web Server Vulnerabilities

Name: Cesanta Mongoose Web Server vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Mongoose Web Server by Cesanta.

11

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

6.8

Avg CVSS

2024–2026

Last updated March 6, 2026

Overview

Cesanta Mongoose Web Server has 11 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Cesanta Mongoose Web Server, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Cesanta Mongoose Web Server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High5

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Cesanta Mongoose Web Server's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of Cesanta Mongoose Web Server's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Cesanta Mongoose Web Server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 7.1410 CVEs
>= 6.91 CVE

Fixed in

> 7.1410 CVEs

Find a version

11 CVEs

Sort

Mongoose Web Server 6.9 Denial of Service via Socket Connection
CVE-2018-25193
Public exploit
CWE-1188
High · CVSS 8.7
EPSS 0.3% (27th pct)2026-03-06
High vulnerability · 2024-11-18
CVE-2024-42392
Patch
Workaround
CWE-140
High · CVSS 7.5
EPSS 0.2% (12th pct)2024-11-18
Medium vulnerability · 2024-11-18
CVE-2024-42391
Patch
Workaround
CWE-823
Medium · CVSS 5.3
EPSS 0.3% (20th pct)2024-11-18
Medium vulnerability · 2024-11-18
CVE-2024-42390
Patch
Workaround
CWE-823
Medium · CVSS 5.3
EPSS 0.3% (20th pct)2024-11-18
Use of Out-of-range Pointer Offset in Mongoose Web Server library
CVE-2024-42389
Patch
Workaround
CWE-823
Medium · CVSS 5.3
EPSS 0.3% (23th pct)2024-11-18
Medium vulnerability · 2024-11-18
CVE-2024-42388
Patch
Workaround
CWE-823
Medium · CVSS 5.3
EPSS 0.3% (23th pct)2024-11-18
Medium vulnerability · 2024-11-18
CVE-2024-42387
Patch
Workaround
CWE-823
Medium · CVSS 5.3
EPSS 0.3% (23th pct)2024-11-18
Use of Out-of-range Pointer Offset in Mongoose Web Server library
CVE-2024-42386
Patch
Workaround
CWE-823
High · CVSS 8.2
EPSS 0.4% (29th pct)2024-11-18
High vulnerability · 2024-11-18
CVE-2024-42385
Patch
Workaround
CWE-140
High · CVSS 7.0
EPSS 0.1% (0th pct)2024-11-18
High vulnerability · 2024-11-18
CVE-2024-42384
Patch
Workaround
CWE-190
High · CVSS 7.5
EPSS 0.5% (39th pct)2024-11-18
Use of Out-of-range Pointer Offset in Mongoose Web Server library
CVE-2024-42383
Patch
Workaround
CWE-823
Critical · CVSS 9.8
EPSS 0.3% (19th pct)2024-11-18

Common weakness types

The CWE weakness categories most often found in Cesanta Mongoose Web Server CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Cesanta Mongoose Web Server CVEs were published each year.

2024

10

2026

1

Other Cesanta products

Browse vulnerabilities for other products by Cesanta.

mjs85 CVEs mongoose60 CVEs mongoose embedded web server library3 CVEs frozen2 CVEs mongoose os2 CVEs mongoose-os2 CVEs mjson1 CVEs mongooseos mjs1 CVEs

All Cesanta vulnerabilities

Frequently asked questions

Common questions about Cesanta Mongoose Web Server vulnerabilities.

How many CVEs does Cesanta Mongoose Web Server have?: Cesanta Mongoose Web Server has 11 published CVE records since 2024.
How many Cesanta Mongoose Web Server CVEs are in CISA KEV?: None of Cesanta Mongoose Web Server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Cesanta Mongoose Web Server vulnerabilities?: Yes — 1 of Cesanta Mongoose Web Server's CVEs have a known public exploit.
Which versions of Cesanta Mongoose Web Server are affected?: 3 distinct Cesanta Mongoose Web Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Cesanta Mongoose Web Server CVEs?: Cesanta Mongoose Web Server's CVEs most often map to these CWE weakness types: CWE-823 (Use of Out-of-range Pointer Offset), CWE-140 (Improper Neutralization of Delimiters), CWE-1188 (Initialization of a Resource with an Insecure Default), CWE-190 (Integer Overflow or Wraparound).
How many critical Cesanta Mongoose Web Server vulnerabilities are there?: Cesanta Mongoose Web Server has 1 critical and 5 high-severity CVEs.
What is the average severity of Cesanta Mongoose Web Server CVEs?: The average CVSS base score across Cesanta Mongoose Web Server's scored CVEs is 6.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Cesanta Mongoose Web Server vulnerabilities

Monitor new Cesanta Mongoose Web Server vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing