{"id":"CVE-2026-66279","published":"2026-10-22T14:17:43.840","lastModified":"2026-10-23T12:18:15.660","description":"In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-940"],"vendors":[],"products":[],"references":[{"url":"https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Advisories/500-599/A-00000588.md","tags":[]},{"url":"https://github.com/SiliconLabsSoftware/sisdk-release/","tags":[]}],"exploitRefs":[{"url":"https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Advisories/500-599/A-00000588.md","tags":[]},{"url":"https://github.com/SiliconLabsSoftware/sisdk-release/","tags":[]}],"hasPoc":true,"ai":null}