HIGH 7.2 NVD
CVE-2026-66279
In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disrupt
In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.
References
- https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Advisories/500-5
- https://github.com/SiliconLabsSoftware/sisdk-release/
This high severity vulnerability with a CVSS score of 7.2 was published on 2026-10-22 via NVD.
vulnfeed aggregates 17299 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.