CVE-2026-2966

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-2966", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-02-22T07:57:24.272Z", "datePublished": "2026-02-23T02:02:08.202Z", "dateUpdated": "2026-02-23T13:36:51.905Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-02-23T02:02:08.202Z"}, "title": "Cesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random values", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-330", "lang": "en", "description": "Insufficiently Random Values"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-310", "lang": "en", "description": "Cryptographic Issues"}]}], "affected": [{"vendor": "Cesanta", "product": "Mongoose", "versions": [{"version": "7.0", "status": "affected"}, {"version": "7.1", "status": "affected"}, {"version": "7.2", "status": "affected"}, {"version": "7.3", "status": "affected"}, {"version": "7.4", "status": "affected"}, {"version": "7.5", "status": "affected"}, {"version": "7.6", "status": "affected"}, {"version": "7.7", "status": "affected"}, {"version": "7.8", "status": "affected"}, {"version": "7.9", "status": "affected"}, {"version": "7.10", "status": "affected"}, {"version": "7.11", "status": "affected"}, {"version": "7.12", "status": "affected"}, {"version": "7.13", "status": "affected"}, {"version": "7.14", "status": "affected"}, {"version": "7.15", "status": "affected"}, {"version": "7.16", "status": "affected"}, {"version": "7.17", "status": "affected"}, {"version": "7.18", "status": "affected"}, {"version": "7.19", "status": "affected"}, {"version": "7.20", "status": "affected"}], "cpes": ["cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*"], "modules": ["DNS Transaction ID Handler"]}], "descriptions": [{"lang": "en", "value": "A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mg_sendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. Executing a manipulation of the argument random can lead to insufficiently random values. The attack can be launched remotely. The attack requires a high level of complexity. The exploitability is regarded as difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.3, "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.7, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R", "baseSeverity": "LOW"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.7, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R", "baseSeverity": "LOW"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 2.6, "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-02-22T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-02-22T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-02-22T09:02:36.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "dwbruijn (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/?id.347333", "name": "VDB-347333 | Cesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random values", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.347333", "name": "VDB-347333 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.755304", "name": "Submit #755304 | Cesanta Mongoose Embedded Web Server 7.20 Insufficiently Random Values", "tags": ["third-party-advisory"]}, {"url": "https://github.com/dwBruijn/CVEs/blob/main/Mongoose/mg_sendnsreq.md", "tags": ["related"]}, {"url": "https://github.com/dwBruijn/CVEs/blob/main/Mongoose/mg_sendnsreq.md#poc", "tags": ["exploit"]}], "tags": ["x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-23T13:36:36.825692Z", "id": "CVE-2026-2966", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-23T13:36:51.905Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-2966", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-23T13:36:36.825692Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-23T13:36:44.960Z"}}], "cna": {"tags": ["x_open-source"], "title": "Cesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random values", "credits": [{"lang": "en", "type": "reporter", "value": "dwbruijn (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 2.6, "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*"], "vendor": "Cesanta", "modules": ["DNS Transaction ID Handler"], "product": "Mongoose", "versions": [{"status": "affected", "version": "7.0"}, {"status": "affected", "version": "7.1"}, {"status": "affected", "version": "7.2"}, {"status": "affected", "version": "7.3"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.7"}, {"status": "affected", "version": "7.8"}, {"status": "affected", "version": "7.9"}, {"status": "affected", "version": "7.10"}, {"status": "affected", "version": "7.11"}, {"status": "affected", "version": "7.12"}, {"status": "affected", "version": "7.13"}, {"status": "affected", "version": "7.14"}, {"status": "affected", "version": "7.15"}, {"status": "affected", "version": "7.16"}, {"status": "affected", "version": "7.17"}, {"status": "affected", "version": "7.18"}, {"status": "affected", "version": "7.19"}, {"status": "affected", "version": "7.20"}]}], "timeline": [{"lang": "en", "time": "2026-02-22T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-02-22T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-02-22T09:02:36.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/?id.347333", "name": "VDB-347333 | Cesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random values", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.347333", "name": "VDB-347333 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.755304", "name": "Submit #755304 | Cesanta Mongoose Embedded Web Server 7.20 Insufficiently Random Values", "tags": ["third-party-advisory"]}, {"url": "https://github.com/dwBruijn/CVEs/blob/main/Mongoose/mg_sendnsreq.md", "tags": ["related"]}, {"url": "https://github.com/dwBruijn/CVEs/blob/main/Mongoose/mg_sendnsreq.md#poc", "tags": ["exploit"]}], "descriptions": [{"lang": "en", "value": "A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mg_sendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. Executing a manipulation of the argument random can lead to insufficiently random values. The attack can be launched remotely. The attack requires a high level of complexity. The exploitability is regarded as difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-330", "description": "Insufficiently Random Values"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-310", "description": "Cryptographic Issues"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-02-23T02:02:08.202Z"}}}, "cveMetadata": {"cveId": "CVE-2026-2966", "state": "PUBLISHED", "dateUpdated": "2026-02-23T13:36:51.905Z", "dateReserved": "2026-02-22T07:57:24.272Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-02-23T02:02:08.202Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*"], "modules": ["DNS Transaction ID Handler"], "product": "Mongoose", "vendor": "Cesanta", "versions": [{"status": "affected", "version": "7.0"}, {"status": "affected", "version": "7.1"}, {"status": "affected", "version": "7.2"}, {"status": "affected", "version": "7.3"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.7"}, {"status": "affected", "version": "7.8"}, {"status": "affected", "version": "7.9"}, {"status": "affected", "version": "7.10"}, {"status": "affected", "version": "7.11"}, {"status": "affected", "version": "7.12"}, {"status": "affected", "version": "7.13"}, {"status": "affected", "version": "7.14"}, {"status": "affected", "version": "7.15"}, {"status": "affected", "version": "7.16"}, {"status": "affected", "version": "7.17"}, {"status": "affected", "version": "7.18"}, {"status": "affected", "version": "7.19"}, {"status": "affected", "version": "7.20"}]}], "source": "cna@vuldb.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*", "matchCriteriaId": "83B5780A-1BF9-4983-A2BD-0E278131D841", "versionEndIncluding": "7.20", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mg_sendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. Executing a manipulation of the argument random can lead to insufficiently random values. The attack can be launched remotely. The attack requires a high level of complexity. The exploitability is regarded as difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Se ha identificado una debilidad en Cesanta Mongoose hasta la versi\u00f3n 7.20. El elemento afectado es la funci\u00f3n mg_sendnsreq del archivo /src/dns.c del componente Gestor de ID de Transacci\u00f3n DNS. Ejecutar el argumento random manipulado puede conducir a valores insuficientemente aleatorios. El ataque puede lanzarse de forma remota. El ataque tiene un nivel de complejidad alto y se considera dif\u00edcil de explotar. El exploit se ha puesto a disposici\u00f3n del p\u00fablico y podr\u00eda usarse para ataques. Se contact\u00f3 al proveedor con antelaci\u00f3n sobre esta divulgaci\u00f3n, pero no respondi\u00f3 de ninguna manera."}], "id": "CVE-2026-2966", "lastModified": "2026-06-17T10:32:07.993", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.6, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.9, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-2966", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-23T13:36:36.825692Z", "version": "2.0.3"}}]}, "published": "2026-02-23T03:15:59.373", "references": [{"source": "cna@vuldb.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/dwBruijn/CVEs/blob/main/Mongoose/mg_sendnsreq.md"}, {"source": "cna@vuldb.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/dwBruijn/CVEs/blob/main/Mongoose/mg_sendnsreq.md#poc"}, {"source": "cna@vuldb.com", "tags": ["Permissions Required", "VDB Entry"], "url": "https://vuldb.com/?ctiid.347333"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/?id.347333"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/?submit.755304"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-310"}, {"lang": "en", "value": "CWE-330"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.0,7.0]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.1,7.1]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.2,7.2]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.3,7.3]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.4,7.4]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.5,7.5]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.6,7.6]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.7,7.7]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.8,7.8]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.9,7.9]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.10,7.10]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.11,7.11]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.12,7.12]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.13,7.13]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.14,7.14]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.15,7.15]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.16,7.16]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.17,7.17]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.18,7.18]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.19,7.19]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.20,7.20]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Mongoose", "source": "cna", "vendor": "Cesanta"}, "product": "mongoose", "vendor": "cesanta"}], "analysis": {"en": {"generated_at": "2026-04-17T16:24:08.440420+00:00", "value": {"mitigation_remediation": ["Upgrade Cesanta Mongoose to a revision that implements a cryptographically secure random number generator for DNS transaction IDs.", "Apply network restrictions to limit exposure of the vulnerable DNS resolver to untrusted traffic sources.", "Enable DNSSEC validation on clients to detect and reject forged DNS responses."], "summary": {"action": "Patch Now", "impact": "Predictable DNS transaction IDs enabling spoofing"}, "threat_synthesis": {"affected_systems": "Cesanta Mongoose up to and including version\u00a07.20.", "description_and_impact": "A weakness was identified in Cesanta Mongoose versions up to 7.20 in the mg_sendnsreq function used for DNS transaction ID handling. Manipulation of the random argument can produce insufficiently random values. The vulnerability can be exploited remotely, although the required complexity and difficulty of the exploitation are high. Public evidence of the exploit has been released. As a result, an attacker could potentially predict DNS transaction IDs and cause forged DNS responses to be accepted by the resolver.", "risk_and_exploitability": "The CVSS score of 6.3 indicates moderate severity. The EPSS score of less than 1% suggests low likelihood of widespread exploitation, and the vulnerability is not listed in CISA\u2019s KEV catalog. The attack vector is remote and would require an attacker to predict DNS transaction IDs by manipulating the random value, a task that is complex and difficult. Publicly available exploit code demonstrates the feasibility of such an attack, but real\u2011world exploitation would still need to overcome the high complexity barrier."}}}}, "created": "2026-02-23T14:28:24.383859+00:00", "updated": "2026-04-17T16:30:05.832202+00:00", "vendors": ["cesanta", "cesanta$PRODUCT$mongoose"]}