{"id":"CVE-2026-15340","published":"2026-10-09T15:17:13.510","lastModified":"2026-10-11T17:17:04.003","description":"lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-120"],"vendors":[],"products":[],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-279-02.json","tags":[]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-02","tags":[]}],"exploitRefs":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-279-02.json","tags":[]}],"hasPoc":true,"ai":{"summary":"The lwIP SMTP client has a buffer overflow vulnerability due to unchecked input sizes, which can lead to arbitrary code execution when processing email messages. This critical flaw allows attackers to overwrite memory and potentially take control of the affected system.","exploitability":"Exploitation is relatively straightforward with remote code execution potential, requiring only a crafted SMTP message to trigger the buffer overflow in the lwIP library.","blast_radius":"The vulnerability affects embedded systems using lwIP's SMTP client, potentially impacting thousands of devices including routers, IoT appliances, and networked embedded platforms that process email communications.","remediation":"Upgrade to lwIP version 2.590 or later to address this buffer overflow vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","network","embedded","smtp"],"model":"garnet-coder","analyzedAt":"2026-10-12T08:43:48.949Z"}}