Is CVE-2026-91018 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-91018?

CVE-2026-91018 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-91018

Description

lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system.