Cesanta

cesanta.com ↗
C
CAUTION
30
Total CVEs
3
Crit / High
12
Medium
17%
Unpatched
17%
Patched
5.0
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
17%
Unpatched
17%
Under Review
54%
Pending
11%
✓ 8 patched ✗ 8 unpatched ~ 25 under review ⏳ 5 pending score
▸ Intelligence by Audience
PoC Available
5 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"cesanta" port:443
org:"Cesanta" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-6985 0.92% exploitation probability
CVE-2026-5244 0.76% exploitation probability
CVE-2026-5245 0.72% exploitation probability
CVE-2026-73257 0.67% exploitation probability
CVE-2026-5246 0.62% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
30
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
17%
Avg CVSS score
5.0
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News

No recent security news found for Cesanta.

▸ Recent CVEs showing 20 of 46
CVE IDSeverityPatchEPSSDate
CVE-2026-101003 PoC 5.3 MEDIUM PATCH UNDER REVIEW 0.46% 2026-09-28
CVE-2026-73259 PoC 5.4 MEDIUM PATCHED / FIX AVAILABLE 0.41% 2026-08-20
CVE-2026-73257 PoC 9.1 CRITICAL PATCHED / FIX AVAILABLE 0.67% 2026-08-20
CVE-2026-73256 PoC 9.1 CRITICAL PATCHED / FIX AVAILABLE 0.44% 2026-08-20
CVE-2026-73253 PoC 9.1 CRITICAL PATCHED / FIX AVAILABLE 0.34% 2026-08-20
CVE-2026-73251 9.1 CRITICAL PATCHED / FIX AVAILABLE 0.19% 2026-08-20
CVE-2026-11404 7.5 HIGH PATCHED / FIX AVAILABLE 0.61% 2026-07-09
CVE-2026-6986 6.3 MEDIUM PATCH UNDER REVIEW 0.22% 2026-04-25
CVE-2026-6985 6.9 MEDIUM PATCH UNDER REVIEW 0.92% 2026-04-25
CVE-2026-5246 6.3 MEDIUM PATCH UNDER REVIEW 0.62% 2026-04-02
CVE-2026-5245 6.3 MEDIUM PATCH UNDER REVIEW 0.72% 2026-04-02
CVE-2026-5244 6.9 MEDIUM PATCH UNDER REVIEW 0.76% 2026-04-02
CVE-2018-25193 8.7 HIGH UNKNOWN / UNPATCHED 0.34% 2026-03-06
CVE-2026-2968 6.3 MEDIUM UNKNOWN / UNPATCHED 0.23% 2026-02-23
CVE-2026-2967 6.3 MEDIUM UNKNOWN / UNPATCHED 0.51% 2026-02-23
CVE-2026-2966 6.3 MEDIUM UNKNOWN / UNPATCHED 0.39% 2026-02-23
CVE-2025-65502 ? N/A PATCH UNDER REVIEW 0.29% 2025-11-24
CVE-2025-0696 5.3 MEDIUM PATCHED / FIX AVAILABLE 0.36% 2025-01-27
CVE-2025-0695 5.3 MEDIUM PATCHED / FIX AVAILABLE 0.36% 2025-01-27
CVE-2024-42392 4.0 MEDIUM PATCH UNDER REVIEW 0.23% 2024-11-18
View all 46 CVEs for Cesanta →
▸Intel
Trust ScoreC — CAUTION
Max CVSS8.2
Last Updated2026-08-03
▸Top Weaknesses
CWE-476
NULL Pointer Dereference
8 occurrences in Cesanta CVEs (27% of total)
CWE-476 ⓘ
8
CWE-823
Unknown Weakness Type
7 occurrences in Cesanta CVEs (23% of total)
CWE-823 ⓘ
7
CWE-345
Unknown Weakness Type
2 occurrences in Cesanta CVEs (7% of total)
CWE-345 ⓘ
2
CWE-119
Buffer Overflow
2 occurrences in Cesanta CVEs (7% of total)
CWE-119 ⓘ
2
CWE-190
Integer Overflow
1 occurrence in Cesanta CVEs (3% of total)
CWE-190 ⓘ
1
CWE-770
Unknown Weakness Type
1 occurrence in Cesanta CVEs (3% of total)
CWE-770 ⓘ
1
CWE-310
Unknown Weakness Type
1 occurrence in Cesanta CVEs (3% of total)
CWE-310 ⓘ
1
CWE-138
Unknown Weakness Type
1 occurrence in Cesanta CVEs (3% of total)
CWE-138 ⓘ
1
▸Company Profile

Cesanta is a software company specializing in embedded networking and IoT solutions, known for developing the Mongoose Web Server library and the Smart.js firmware framework. Their products are widely used in resource-constrained devices, making them relevant to cybersecurity due to the potential for vulnerabilities in IoT and embedded systems. With 24 tracked CVEs, their software has been a focus for security researchers examining network stack and web server flaws.

▸Response Metrics
Est. MTTR ⓘ ~326 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +167% worse
CVE count 2026 vs 2025:  3 → 8 CVEs
Patch Speed ⓘ Poor (>65% open)
17% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€460K
Est. GDPR High
€4.6M

Based on 0 critical CVEs, 0 CISA KEV, 77% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Cesanta C valtersit.com