As cited
Copy frozen at (site build).
vulnerabilities
Savannah lwIP SMTP client
CVE-2026-15340 is a critical buffer overflow vulnerability in Savannah lwIP SMTP client version 2.2.1 that allows unauthenticated remote attackers to crash affected devices or execute arbitrary code over the network. The vulnerability stems from the application failing to validate input size before copying data into a buffer. A patch is available as git commit 614420f82c8729d070e01464c0dddb3c9525c772.
Why it matters: Organizations deploying lwIP SMTP client 2.2.1 in energy, water, or wastewater systems worldwide should immediately apply the available patch to prevent remote code execution on critical infrastructure.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Savannah lwIP SMTP client
A buffer overflow vulnerability in Savannah lwIP SMTP client version 2.2.1 could allow remote code execution or crash affected devices. The flaw stems from insufficient input size validation in the SMTP client implementation. A patch is available as git commit 614420f82c8729d070e01464c0dddb3c9525c772.
Why it matters: Organizations running lwIP SMTP client 2.2.1 in industrial control systems, particularly in energy and water sectors worldwide, should apply the available patch immediately to prevent remote exploitation.
- Source published
- First seen by Cybersecurity Tracker