ICSA-26-265-01

Critical lwIP MQTT Client Buffer Overflow Enables Remote Code Execution on Industrial IoT Devices CVE-2026-87121

CISA releases advisory ICSA-26-265-01 for critical CVSS 9.8 flaw CVE-2026-87121 in lwIP MQTT client, allowing unauthenticated attackers to execute arbitrary code.