Threat+Constellation
Live— UTC
← Incidents
INCIDENT 821IntrusionLOW / UNDER REVIEWSourced

Savannah lwIP SMTP client

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-279-02.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution.</strong></p> <p>The following versions of Savannah lwIP SMTP client are affected:</p> <ul> <li>lwIP SMTP client 2.2.1 (CVE-2026-15340)</li> </ul> <div class="csaf-table"> <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap> <thead> <tr> <th role="colu…

Last evidence update
06 OCT 2026 · 12:00 UTC
Source count
1
Status
reported
ManufacturingEnergyUtilitiesDefenseCVE-2026-15340
Observation history

How this record has evolved as evidence accumulated.

07 OCT · 05:00 UTC
Initial report
Evidence