What’s Vulnerable › Products

espressif arduino-esp32 vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your espressif arduino-esp32 version is affected

Latest espressif arduino-esp32 vulnerabilities

• CVE-2026-42855 — arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack (CVSS 7.5)
• CVE-2026-42854 — arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE (CVSS 9.8)
• CVE-2026-41429 — Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruption (CVSS 8.8)
• CVE-2025-53540 — CSRF Vulnerability in Firmware Update Endpoints Allows Remote Code Execution (CVSS 8.7)
• CVE-2025-53007 — arduino-esp32 vulnerable to CRLF injection in WebServer.cpp (CVSS 8.9)
• CVE-2019-12586 — (CVSS 6.5)