Findings

CVE-2026-15340

Savannah lwIP SMTP client

Published Oct 6, 2026 · CISA

View CSAF Summary Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution. The following versions of Savannah lwIP SMTP client are affected: lwIP SMTP client 2.2.1 (CVE-2026-15340) <th role="colum

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 6, 2026 · CISA Cybersecurity Advisories

    Detected

    View CSAF Summary Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution. The following versions of Savannah lwIP SMTP client are affected: lwIP SMTP client 2.2.1 (CVE-2026-15340) <th role="colum

Sources

  • CISA Cybersecurity AdvisoriesGovernment advisoryCVE-2026-15340

    View CSAF Summary Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution. The following versions of Savannah lwIP SMTP client are affected: lwIP SMTP client 2.2.1 (CVE-2026-15340) <th role="

    cisa.gov
  • CISA ICS AdvisoriesGovernment advisoryCVE-2026-15340

    View CSAF Summary Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution. The following versions of Savannah lwIP SMTP client are affected: lwIP SMTP client 2.2.1 (CVE-2026-15340) <th role="

    cisa.gov
  • CVE.orgVulnerability recordCVE-2026-15340

    Official CVE identifier

    cve.org