CVE-2026-89410

Vulnerability Description

In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information.

Related Weaknesses (CWE)

CWE-1285

References

https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Adviso

FAQ

What is CVE-2026-89410?

CVE-2026-89410 is a documented vulnerability. In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information.

How severe is CVE-2026-89410?

CVSS scoring is not yet available for CVE-2026-89410. Check NVD for updates.

Is there a patch for CVE-2026-89410?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.