What’s Vulnerable › Vulnerabilities

CVE-2026-66279: Dis-connect vulnerability in Connect Stack

• Severity: high (CVSS 7.2 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-22 · updated 2026-10-23
• Weakness: CWE-940

Description

In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.

Affected products

• Silicon Labs Connect SDK: from 4.0.0 through 4.3.1; through 3.7.7

References

• https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Advisories/500-599/A-00000588.md
• https://github.com/SiliconLabsSoftware/sisdk-release/

Get alerted when CVE-2026-66279 or the next vulnerability affects your stack