[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-87121":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-22T20:42:13.886Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":24,"related":25,"reserved_at":9,"published_at":26,"modified_at":27,"state":28,"summary":29,"references_raw":36,"kevs":50,"epss":9,"epss_history":51,"metrics":52,"affected":64},"CVE-2026-87121","lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base","High",[],[],[],[],[],[],[],"2026-09-22T19:48:25.046Z","2026-09-22T20:23:09.069Z","Received",{"cisa_kev":30,"cisa_ransomware":30,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":31,"severity_score":32,"severity_version":33,"severity_source":34,"severity_vector":35,"severity_status":28},false,"critical",9.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[37,42,46],{"url":38,"sources":39,"tags":41},"https://savannah.nongnu.org/projects/lwip",[34,40],"nvd",[],{"url":43,"sources":44,"tags":45},"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-01",[34,40],[],{"url":47,"sources":48,"tags":49},"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-265-01.json",[34,40],[],[],[],[53,60],{"source":34,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":54,"cvss_v4_0":57},{"baseScore":32,"baseSeverity":55,"vectorString":35,"impactScore":32,"exploitabilityScore":56},"CRITICAL",10,{"baseScore":58,"baseSeverity":55,"vectorString":59,"impactScore":9,"exploitabilityScore":9},9.3,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",{"source":40,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":61,"cvss_v4_0":62},{"baseScore":32,"baseSeverity":55,"vectorString":35,"impactScore":32,"exploitabilityScore":56},{"baseScore":58,"baseSeverity":55,"vectorString":63,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[65],{"ecosystem":9,"name":66,"vendor":67,"product":68,"cpe_part":69,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":70},"TCP/IP Stack MQTT","lwip","tcp/ip stack mqtt","a",[71],{"version":72,"is_range":73,"range_type":34,"version_start":74,"version_start_type":75,"version_end":76,"version_end_type":75,"fixed_in":9},">= 2.0.1, \u003C= 2.2.1",true,"2.0.1","including","2.2.1"]