{"vulnerability": "CVE-2026-91018", "sightings": [{"uuid": "8f4dace4-6a7d-439a-8584-3bdf403e7eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91018", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw4mg67zwe2j", "content": "~Cisa~\nDouble-free in lwIP 2.0.1\u20132.2.1 may enable crashes, DoS, memory corruption, or code execution.\n-\nIOCs: cgit[.]git[.]savannah[.]gnu[.]org\n-\n#CVE-2026-91018 #ICS #ThreatIntel", "creation_timestamp": "2026-09-22T16:09:45.425319Z"}, {"uuid": "c4af1b59-54ac-41a5-b276-e323667f1eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-91018", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-02", "content": "", "creation_timestamp": "2026-09-22T16:15:26.743291Z"}, {"uuid": "bd7321b7-0df5-4ad3-ba25-f6978f707b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91018", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwaao34hkk24", "content": "CVE-2026-91018 - lwip api\nThe lightweight IP library (lwIP) can free the same memory twice, which can cause the program to stop working, become unresponsive, or let an attacker run their own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lwipapi #lwip #UbuntuPro2004LTS #CVE #infosec", "creation_timestamp": "2026-09-24T02:50:04.436592Z"}]}