CVE-2026-101003— Cesanta Mongoose MQTT Broker main.c fn stack-based overflow
Quick assessment
Affected
Cesanta Mongoose
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Cesanta Mongoose 7.21 及更早版本中发现了一个安全弱点。受影响的组件为 MQTT Broker，具体涉及文件 tutorials/mqtt/mqtt-server/main.c 中的函数 fn。通过执行恶意操作，可导致基于栈的缓冲区溢出。该漏洞可被远程利用。目前相关利用代码已公开，攻击者可能利用其发起攻击。通过升级至版本 7.22 可修复此问题，该补丁对应的提交哈希为 a9df523f76f43a38bd53b4232b9cfd4c16869e71。建议尽快升级受影响的组件以缓解风险。
Possible ATT&CK Techniques 3 AI
T1203 · Exploitation for Client Execution T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-101003
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cesanta Mongoose MQTT Broker main.c fn stack-based overflow
Source: CVE Program / CVE List V5
Vulnerability Description
A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 7.22 addresses this issue. This patch is called a9df523f76f43a38bd53b4232b9cfd4c16869e71. Upgrading the affected component is advised.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-101003
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-101003
请登录查看更多情报信息。
Vendor Pages for CVE-2026-101003 (1)
Other References for CVE-2026-101003 (1)
IV. Related Vulnerabilities
Same product: Mongoose
-
CVE-2026-73253
Mongoose: TLS Hostname Verification Bypass via Overly Permis -
CVE-2026-73255
Mongoose: Path traversal in SSI #include directives enables -
CVE-2026-73259
Mongoose: Reflected XSS via decoded URI in directory listing -
CVE-2026-73256
Mongoose: HTTP/1.0 detection off-by-one enables request smug -
CVE-2026-73254
Mongoose: Stored XSS via unescaped filenames in directory li
Same vendor: Cesanta
-
CVE-2026-86716
Cesanta mJS mjs_tok.c skip_spaces_and_comments heap-based ov -
CVE-2026-73253
Mongoose: TLS Hostname Verification Bypass via Overly Permis -
CVE-2026-73255
Mongoose: Path traversal in SSI #include directives enables -
CVE-2026-73259
Mongoose: Reflected XSS via decoded URI in directory listing -
CVE-2026-73256
Mongoose: HTTP/1.0 detection off-by-one enables request smug
Same weakness: CWE-121
-
CVE-2026-101074
Netcore NR289-GE Authentication boa password-check stack-bas -
CVE-2026-101039
FAST FAC1900R devdiscover Service copy_msg_element stack-bas -
CVE-2026-101038
FAST FAC1200R MmtAtePrase stack-based overflow -
CVE-2026-101037
FAST FAC1200R devdiscover Service parse_advertisement_frame -
CVE-2026-95104
BUFFALO Wi-Fi 栈缓冲区溢出致DoS
V. Comments for CVE-2026-101003
No comments yet