CVE-2026-66279 | BDVDB-2026-394256 Detail
Silicon LabsConnect SDK
Description#
In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.
Impact#
CAPEC-115: Authentication Bypass, CAPEC-176: Configuration/Environment Manipulation
Weaknesses#
- CWE-940 Improper Verification of Source of a Communication Channel
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.