Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-66279

Dis-connect vulnerability in Connect Stack

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Silabs

Description

In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Silicon Labs Connect SDK

Default version status: unaffected

  • 4.0.0 to ≤ 4.3.1affected
  • 0 to ≤ 3.7.7affected

References