logo

lwIP (Lightweight IP)

ID: 766cf24d-e72e-5da8-870a-c5ba426c4772

STIX ID: report--766cf24d-e72e-5da8-870a-c5ba426c4772

Feed Name: CISA Advisories

Threat Score
60/100

Date Published: 2026-09-22

Date Updated: 2026-10-16

Author: CISA

...
...

**CISA advisory:** A double-free vulnerability (CVE-2026-91018) in lwIP API versions >=2.0.1 and <=2.2.1 carries a CVSS v3 score of 8.8 and could lead to system crashes, DoS, memory corruption, or local code execution; CISA lists affected critical infrastructure sectors worldwide, provides mitigation guidance, and notes no known public exploitation and that the issue is not remotely exploitable.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.