CVE-2026-66279

— UNSCOREDpublic exploit available

Published 2026-10-22 · Updated 2026-10-23

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.

Weaknesses

CWE-940

Public exploit & PoC references

https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Advisories/500-599/A-00000588.md
https://github.com/SiliconLabsSoftware/sisdk-release/

All references

https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Advisories/500-599/A-00000588.md
https://github.com/SiliconLabsSoftware/sisdk-release/

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

UNSCOREDCVE-2026-101897PoC
HIGHCVE-2026-102117PoC
UNSCOREDCVE-2026-102511
HIGHCVE-2026-102551PoC
MEDIUMCVE-2026-102552PoC
HIGHCVE-2026-112408PoC
UNSCOREDCVE-2026-59786
HIGHCVE-2026-87705

Related by shared AI tags and CWE weakness class. Browse the full archive.