Topic
2 articles
CyberSecureToday covers lwIP across 2 articles published between 23 Sep 2026 and 24 Sep 2026.
The coverage includes 2 vulnerability advisories. 2 advisories are rated critical or high severity.
Stories on lwIP most often intersect with CISA ICS-CERT, MQTT Protocol and Industrial IoT, with Industrial, OT & IoT the most affected sector. The most recent story, “lwIP MQTT Client Overflow Enables Remote Code Execution on Industrial IoT Devices”, was published 24 Sep 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
OT / SCADACISA releases advisory ICSA-26-265-01 for critical CVSS 9.8 flaw CVE-2026-87121 in lwIP MQTT client, allowing unauthenticated attackers to execute arbitrary code.
OT / SCADACISA and lwIP maintainers warn of high-severity flaw CVE-2026-91018 in the lwIP TCP/IP stack allowing unauthenticated remote memory corruption across IoT and PLCs.