{"metadata": {"vulnerability": "CVE-2026-73252", "count": 12, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-08-11T17:18:01.598Z", "date_only": false, "value": "2026-08-11T17:18:01.598Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-73252", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-14T00:00:00Z", "date_only": false, "value": "2026-08-14T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-73252", "record": "UBUNTU-CVE-2026-73252", "field": "published"}, {"timestamp": "2026-08-14T00:00:00Z", "date_only": false, "value": "2026-08-14T00:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-73252", "record": "UBUNTU-CVE-2026-73252", "field": "modified"}, {"timestamp": "2026-10-14T18:24:16.659Z", "date_only": false, "value": "2026-10-14T18:24:16.659Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-73252", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T18:24:16.659Z", "date_only": false, "value": "2026-10-14T18:24:16.659Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-73252", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T19:17:19.667Z", "date_only": false, "value": "2026-10-14T19:17:19.667", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73252", "record": "FKIE_CVE-2026-73252", "field": "published"}, {"timestamp": "2026-10-14T19:41:34.958Z", "date_only": false, "value": "2026-10-14T19:41:34.958467Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-73252", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T19:41:34.958Z", "date_only": false, "value": "2026-10-14T19:41:34.958467Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73252", "record": "FKIE_CVE-2026-73252", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T19:41:57.801Z", "date_only": false, "value": "2026-10-14T19:41:57.801Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-73252", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T19:41:57.801Z", "date_only": false, "value": "2026-10-14T19:41:57.801Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-73252", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T23:42:31.247Z", "date_only": false, "value": "2026-10-14T23:42:31.247220Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117441911241613749", "record": "CVE-2026-73252", "field": "creation_timestamp", "uuid": "49d25399-3783-4576-a292-96ab84a867d0", "content": "CVE-2026-73252 Mongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAX Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS stack selected by MG_TLS_BUILTIN in src/tls_builtin.c accepts a TLS 1.3 record whose decrypted size is exactly the 16-byte authentication tag with no plaintext or ContentType byte. In mg_tls_recv_record(), the msgsz length check permits that record and the recv_len calculation underflows to SIZE_MAX, so a later handshake step treats stale buffer contents as a trusted message with an effectively unbounded length. An unauthenticated malicious TLS peer can trigger a heap out-of-bounds read before certificate or Finished validation, causing a remote denial of service. This issue is fixed in version 7.23.\nhttps://www.cve.org/CVERecord?id=CVE-2026-73252https://github.com/cesanta/mongoose/security/advisories/GHSA-hq58-98f5-2wg3https://github.com/cesanta/mongoose/commit/758e301f0c9a9885c1b716195df5fe6d6ac9d53ehttps://github.com/cesanta/mongoose/releases/tag/7.23#cesanta #mongoose#CVE_2026_73252#bot", "url": "https://infosec.exchange/users/cve/statuses/117441911241613749"}, {"timestamp": "2026-10-16T20:04:29.760Z", "date_only": false, "value": "2026-10-16T20:04:29.760", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73252", "record": "FKIE_CVE-2026-73252", "field": "lastModified"}]}