Vulnerability Description
In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.
Related Weaknesses (CWE)
References
- https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Adviso
- https://github.com/SiliconLabsSoftware/sisdk-release/
FAQ
What is CVE-2026-66279?
CVE-2026-66279 is a documented vulnerability. In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow a...
How severe is CVE-2026-66279?
CVSS scoring is not yet available for CVE-2026-66279. Check NVD for updates.
Is there a patch for CVE-2026-66279?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.