Savannah

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Savannah records in CISA KEV

No Savannah vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-70070 CVE-2026-15340

Buffer overflow in Savannah lwIP SMTP client

MEDIUM 48

lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00367 Published 2026-10-09 Fixed in patch_125_smtp_txbuf.diff, git commit (614420f82c8729d070e01464c0dddb3c9525c772) CWE-120

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0