PT-2026-121392 · Silicon · Connect Sdk

·

CVE-2026-66279

·

Published

2026-10-22

·

Updated

2026-10-22

CVSS v4.0

7.2

High

VectorAV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-66279

Affected Products

Connect Sdk