# mtls

Published articles for mtls.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices

DevFeed: [Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices](<https://devfeed.tech/articles/mongoose-preauth-rce-and-mtls-bypass-on-millions-of-devices-41273.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2026/04/02/Mongoose-Preauth-Remote-Code-Execution-and-mTLS-Bypass/>)

Author: Simone Margaritelli

Published: 2026-04-01T22:00:00Z

Content type: article

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Mongoose](<https://devfeed.tech/topics/mongoose.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Security](<https://devfeed.tech/topics/security.md>), [Embedded Systems](<https://devfeed.tech/topics/embedded-systems.md>), [Internet of things](<https://devfeed.tech/topics/iot.md>), [C](<https://devfeed.tech/topics/c.md>), [cross-platform](<https://devfeed.tech/topics/cross-platform.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [MQTT](<https://devfeed.tech/topics/mqtt.md>), [WebSocket](<https://devfeed.tech/topics/websocket.md>)

Tags: [authentication-bypass](<https://devfeed.tech/tags/authentication-bypass.md>), [buffer-overflow](<https://devfeed.tech/tags/buffer-overflow.md>), [c](<https://devfeed.tech/tags/c.md>), [cesanta](<https://devfeed.tech/tags/cesanta.md>), [cross-platform](<https://devfeed.tech/tags/cross-platform.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-2026-5244](<https://devfeed.tech/tags/cve-2026-5244.md>), [cve-2026-5245](<https://devfeed.tech/tags/cve-2026-5245.md>), [cve-2026-5246](<https://devfeed.tech/tags/cve-2026-5246.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [embedded](<https://devfeed.tech/tags/embedded.md>), [embedded-devices](<https://devfeed.tech/tags/embedded-devices.md>), [embedded-systems](<https://devfeed.tech/tags/embedded-systems.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [heap-overflow](<https://devfeed.tech/tags/heap-overflow.md>), [http](<https://devfeed.tech/tags/http.md>), [https](<https://devfeed.tech/tags/https.md>), [industrial-control](<https://devfeed.tech/tags/industrial-control.md>), [iot](<https://devfeed.tech/tags/iot.md>), [iot-security](<https://devfeed.tech/tags/iot-security.md>), [library](<https://devfeed.tech/tags/library.md>), [mdns](<https://devfeed.tech/tags/mdns.md>), [mips](<https://devfeed.tech/tags/mips.md>), [mongoose](<https://devfeed.tech/tags/mongoose.md>), [mqtt](<https://devfeed.tech/tags/mqtt.md>), [mtls](<https://devfeed.tech/tags/mtls.md>), [rce](<https://devfeed.tech/tags/rce.md>), [responsible-disclosure](<https://devfeed.tech/tags/responsible-disclosure.md>), [security](<https://devfeed.tech/tags/security.md>), [stack-overflow](<https://devfeed.tech/tags/stack-overflow.md>), [tls](<https://devfeed.tech/tags/tls.md>), [vulnerability-research](<https://devfeed.tech/tags/vulnerability-research.md>)

### AI overview

The article reports three independently exploitable vulnerabilities in Mongoose v7.20, an embedded C networking library used in IoT devices: an mTLS authentication bypass, a preauthentication heap-overflow RCE through client public-key parsing, and a preauthentication RCE through mDNS over UDP. Mongoose v7.21 reportedly includes patches for the issues, which were assigned CVE-2026-5244, CVE-2026-5245, and CVE-2026-5246.

### Source excerpt

So, Mongoose. I

## Exploring Temporal Cloud automation features

DevFeed: [Exploring Temporal Cloud automation features](<https://devfeed.tech/articles/exploring-temporal-cloud-automation-features-35831.md>)

Original publisher: [Read original article](<https://temporal.io/blog/exploring-temporal-cloud-automation-features>)

Author: Irina Belova

Published: 2024-03-25T06:00:00Z

Content type: article

Language: en

Sources: [Temporal Blog](<https://devfeed.tech/sources/temporal-blog.md>)

Topics: [Automation](<https://devfeed.tech/topics/automation.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>), [terraform provider](<https://devfeed.tech/topics/terraform-provider.md>), [API](<https://devfeed.tech/topics/api.md>), [Infrastructure as code](<https://devfeed.tech/topics/infrastructure-as-code.md>), [API keys](<https://devfeed.tech/topics/api-keys.md>), [certificates](<https://devfeed.tech/topics/certificates.md>), [Security](<https://devfeed.tech/topics/security.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [api-keys](<https://devfeed.tech/tags/api-keys.md>), [automation](<https://devfeed.tech/tags/automation.md>), [certificates](<https://devfeed.tech/tags/certificates.md>), [cli](<https://devfeed.tech/tags/cli.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [infrastructure-as-code](<https://devfeed.tech/tags/infrastructure-as-code.md>), [mtls](<https://devfeed.tech/tags/mtls.md>), [organizations](<https://devfeed.tech/tags/organizations.md>), [platform-teams](<https://devfeed.tech/tags/platform-teams.md>), [provisioning](<https://devfeed.tech/tags/provisioning.md>), [security](<https://devfeed.tech/tags/security.md>), [temporal](<https://devfeed.tech/tags/temporal.md>), [temporal-concepts](<https://devfeed.tech/tags/temporal-concepts.md>), [terraform-provider](<https://devfeed.tech/tags/terraform-provider.md>)

### AI overview

Temporal Cloud's automation features support management of namespaces, users, access, account settings, and team onboarding. The article also describes API, Terraform provider, and Temporal Cloud CLI integrations, including automated mTLS certificate rotation and centralized governance for platform teams.

### Source excerpt

Temporal Cloud Automation capabilities are transforming the way companies deploy, manage, and scale their operations in the Cloud.

## Certificate generation for Temporal Cloud with tcld

DevFeed: [Certificate generation for Temporal Cloud with tcld](<https://devfeed.tech/articles/certificate-generation-for-temporal-cloud-with-tcld-35755.md>)

Original publisher: [Read original article](<https://temporal.io/blog/certificate-generation-for-temporal-cloud-with-tcld>)

Author: Jonathan Lacefield

Published: 2023-07-19T04:00:00Z

Content type: tutorial

Language: en

Sources: [Temporal Blog](<https://devfeed.tech/sources/temporal-blog.md>)

Topics: [Cloud](<https://devfeed.tech/topics/cloud.md>), [certificates](<https://devfeed.tech/topics/certificates.md>), [Security](<https://devfeed.tech/topics/security.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [client](<https://devfeed.tech/topics/client.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [certificates](<https://devfeed.tech/tags/certificates.md>), [cli](<https://devfeed.tech/tags/cli.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [mtls](<https://devfeed.tech/tags/mtls.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

This tutorial explains how to use the Temporal Cloud CLI, tcld, to generate CA and end-entity certificates for mTLS authentication with Temporal Cloud. Because certificate generation runs locally, Temporal does not access users' secret keys.

### Source excerpt

Discover how tcld simplifies certificate generation for Temporal Cloud, enhancing security and authentication.