CVE-2026-87121

Name of the Vulnerable Software and Affected Versions lwIP TCP/IP Stack MQTT (affected versions not specified)

Description The MQTT client in the lwIP TCP/IP Stack contains an out-of-bounds write flaw. This issue allows an unauthenticated attacker to achieve remote code execution on the device, potentially enabling lateral movement across industrial networks where unencrypted industrial protocols are used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Implement runtime segmentation to contain post-compromise activity.