Savannah vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Savannah products: 1 record(s), with severity, exploitation and fixes.

lwIP SMTP client 1

Exploited only (KEV) →

CVE-2026-15340 Critical · 9.8 CWE-120 Oct 9, 2026

Savannah lwIP SMTP client Classic Buffer Overflow

lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.