View CSAF
Summary
Successful exploitation of this vulnerability could allow an attacker to gain full code execution on the device.
The following versions of lwIP TCP/IP Stack MQTT Client Application are affected:
MQTT Client Application >=2.0.1|<=2.2.1 (CVE-2026-87121)
CVSS
Vendor
Equipment
Vulnerabilities
v3 9.8
lwIP
lwIP TCP/IP Stack MQTT Client Application
Out-of-bounds Write
Background
Critical Infrastructure Sectors: Chemical, Communications, Critical Manufacturing, Ene…
📰 来源: CISA 安全公告
⚠️ 合规声明: 本文内容仅用于网络安全合规学习、科研与授权测试用途。严禁用于任何未授权行为,违者自行承担全部法律责任。