CVE-2026-66279

CVSS 7.2 (high) · published 2026-10-22

In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.

Weakness: CWE-940

Source: NVD CVE-2026-66279

References

• https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Advisories/500-599/A-00000588.md
• https://github.com/SiliconLabsSoftware/sisdk-release/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.