Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-based buffer overflow. The attack may be initiated remotely. The patch is named 0c957ec03054eb6c8205e9c9d1d05d90ada3898c. It is suggested to install a patch to address this issue. Two separate issue reports were submitted to the project. Their processing was merged as a duplicate.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-18 | 2 | Disclosure1Patch1 |
| 2026-05-19 | 1 | General1 |
| 2026-05-20 | 2 | Disclosure1General1 |
| 2026-06-12 | 1 | Patch1 |
🚨 CVE-2026-8836 — CVSS 9.8/10 ██████████ A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/umGbaWcBd2
Post summary
CVE-2026-8836 identified as a critical flaw in lwIP (snmp_parse_inbound_frame) with a CVSS score of 9.8. A patch has already been released.
Ubuntu released USN-8423-1 fixing multiple lwIP flaws, including buffer overflows in EAP auth and SNMPv3 (CVE-2020-8597, CVE-2026-8836) affecting Ubuntu 20.04, 22.04, 24.04 and 26.04 LTS, Ubuntu security notice said. https://threatcluster.io/cluster/multiple-lwip-vulnerabilities-affecting-ubuntu-2004-lts-583cddc9
Post summary
Ubuntu’s USN-8423-1 patch addresses buffer overflow flaws in lwIP’s EAP auth and SNMPv3 on multiple LTS releases, with no evidence of active exploitation or PoC reported.
🚨*CVE* CVE-2026-8836 A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handle… https://www.cve.org/CVERecord?id=CVE-2026-8836 ----- Traducción: CVE-2026-8836 Se … http://infoflow.cloud`
Post summary
The message surfaces CVE‑2026‑8836 with a brief reference to the affected function in lwIP, but offers no detail on exploitation, fixes, or technical aspects.
CVE-2026-8836 A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handle… https://www.cve.org/CVERecord?id=CVE-2026-8836
Post summary
An update to lwIP reveals a flaw in the SNMPv3 USM component, specifically the snmp_parse_inbound_frame function, but no exploit code, active exploitation, or patch information is discussed.
Some increased actor activities are shown targeting lwIP (CVE-2026-8836) https://vuldb.com/vuln/364474/cti
Post summary
The post notes observed actor activity targeting the lwIP vulnerability CVE‑2026‑8836 but does not provide any proof‑of‑concept, exploit, patch, or confirmation of active exploitation.
The severity is increased for this new vulnerability affecting lwIP (CVE-2026-8836) https://vuldb.com/vuln/364474
Post summary
A new vulnerability (CVE‑2026‑8836) affecting lwIP has been reported, with severity noted as increased; minimal details are provided.