lwIP (Lightweight IP)

View CSAF Summary Successful exploitation of this vulnerability could result in a system crash, a DoS, or memory corruption, which could lead to code execution on the victim system. The following versions of lwIP (Lightweight IP) are affected: API >=2.0.1|<=2.2.1 (CVE-2026-91018) CVSS Vendor Equipment Vulnerabilities v3 8.8 lwIP lwIP (Lightweight IP) Double Free Background Critical Infrastructure Sectors: Chemical, Communications, Critical Manufacturing, Energy, Financial Services, Healthcare…

Číst originál na CISA Advisories →

22. 9. 2026 14:00 CZ · EN/orig

lwIP energetika vodárenství telekomunikace doprava US

tg: zranitelnost tp: průmyslové systémy

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-91018	8.8 3.1 · icscert 8.7 4.0 · icscert	–	0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.8.