LW
Product
lwIP
by lwIP · last CVE Oct 29, 2026
3
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 1High 0Medium 2Low 0
Watch

Add lwIP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-8836
9.8
1%
May 18
lwIP snmpv3 USM snmp_msg.c snmp_parse_inbound_frame stack-based overflow
Affected: 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1
CVE-2026-112062
5.9
0%
Oct 18
lwIP through 2.2.1 Stack Out-of-Bounds Write via mDNS Search Response Handler
Affected: through 2.2.1
CVE-2026-119053
New
5.3–Oct 29
lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read via snmp_pbuf_stream_writeto()
Affected: 2.0.0 through 2.2.1
Showing 3