Výsledky hledání

CVE: CVE-2026-87121× výrobce: lwIP× v celém archivu zrušit filtry

2 karet z 2 položek CZ · EN/orig

1

lwIP - Multiple Severe Vulnerabilities

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-87121, CVE-2026-91018, Summary: Two memory-safety vulnerabilities affect lwIP versions 2.0.1–2.2.1. CVE-2026-87121 is an out-of-bounds write in the MQTT client that could allow an unauthenticated network attacker to execute code on an affected device. CVE-2026-91018 is an adjacent-network double-free vulnerability that could cause denial of service, memory corruption or code execution…

EPSS 0.01 CVSS 9.8 CVE-2026-87121 CVE-2026-91018 lwIP FI

tg: zranitelnost

· NCSC-FI · lwIP - Multiple Severe Vulnerabilities

1

lwIP TCP/IP Stack MQTT Client Application

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to gain full code execution on the device. The following versions of lwIP TCP/IP Stack MQTT Client Application are affected: MQTT Client Application >=2.0.1|<=2.2.1 (CVE-2026-87121) CVSS Vendor Equipment Vulnerabilities v3 9.8 lwIP lwIP TCP/IP Stack MQTT Client Application Out-of-bounds Write Background Critical Infrastructure Sectors: Chemical, Communications, Critical Manufacturing, Energy, Financial…

EPSS 0.01 CVSS 9.8 CVE-2026-87121 lwIP telekomunikace výroba a průmysl energetika finance US

tg: zranitelnost tp: průmyslové systémy

· CISA Advisories · lwIP TCP/IP Stack MQTT Client Application