What’s Vulnerable › Vulnerabilities

CVE-2026-78806

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-21 · updated 2026-09-24
• Weakness: CWE-200

Description

An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the ChipDeviceController.cpp component

References

• https://csa-iot.org/developer-resource/specifications-download-request/
• https://github.com/Anonymous241429/Matter
• https://github.com/project-chip/connectedhomeip/

Get alerted when CVE-2026-78806 or the next vulnerability affects your stack