THREAT OPS › Threat News › [NVD] CVE-2026-8836 (CRITICAL 9.8) — A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-based buffer overflow.
[NVD] CVE-2026-8836 (CRITICAL 9.8) — A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-based buffer overflow.
CVE-2026-8836 CVSS: 9.8 CRITICAL Published: 2026-05-18T19:16:28.533
A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-based buffer overflow. The attack may be initiated remotely. The patch is
Indicators of compromise
- 0c957ec03054eb6c8205e9c9d1d05d90ada3898csha1
- CVE-2026-8836cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-8836