CVE-2026-6985

HighCVSS 7.5/10Last modified Oct 26, 2026

Description

A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects the function handle_opt of the file /src/net_builtin.c of the component TCP Option Handler. This manipulation of the argument optlen causes infinite loop. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 7.21 is able to resolve this issue. Upgrading the affected component is advised. VulDB has contacted the vendor early and they confirmed quickly, that this issue got fixed already.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-404CWE-835

Affected software

VendorProductVersions
CesantaMongoose7.0; 7.1; 7.2; 7.3; 7.4; 7.5; 7.6; 7.7; 7.8; 7.9; 7.10; 7.11; 7.12; 7.13; 7.14; 7.15; 7.16; 7.17; 7.18; 7.19

References

Timeline

Published
Apr 25, 2026
Last modified
Oct 26, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-698507.8Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.CVE-2026-698519.9Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.CVE-2026-698527.5Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machineCVE-2026-698534.7Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.CVE-2026-698548.1Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.CVE-2026-698556.5Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network.CVE-2026-698567.0Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.CVE-2026-698578.8Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network.CVE-2026-698588.1Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.CVE-2026-698597.0Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate CVE-2026-69863.7A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mg_aes_gcm_decrypt of the file /sCVE-2026-698608.8Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-6985: High severity, CVSS 7.5 | Vulnix