← Incidents
INCIDENT 637PhishingLOW / UNDER REVIEWSourced
lwIP TCP/IP Stack MQTT Client Application
<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-265-01.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability could allow an attacker to gain full code execution on the device.</strong></p> <p>The following versions of lwIP TCP/IP Stack MQTT Client Application are affected:</p> <ul> <li>MQTT Client Application >=2.0.1|<=2.2.1 (CVE-2026-87121)</li> </ul> <div class="csaf-table"> <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap> <thead> <tr> <th role="colu…
Last evidence update
22 SEP 2026 · 12:00 UTC
Source count
1
Status
reported
ManufacturingEnergyHealthcareFinanceUtilitiesTransportationDefenseCVE-2026-87121
Observation history
How this record has evolved as evidence accumulated.
23 SEP · 05:22 UTC
Initial report
Evidence