[ CVE-2026-66279 · Published 22 Oct 2026 ]
Vulnerability in Silicon Labs Connect SDK
CVSS 7.2
No fix listed yet
[ Description ]Official description
In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.