CVE-2026-89409mediumCWE-940

CVE-2026-89409: falha de média gravidade em Silicon Labs Z-Wave SDK

Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes​

Publicada em

Seguir esta CVE+ Monitorar Z-Wave SDK

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.3%
In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices), missing checks in the ZWAVE_CMD_NODES_EXIST handler can result in nodes being removed from the network. These messages must come from a device that has already joined the network.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
Silicon Labs · Z-Wave SDK
CVEs relacionadas — Silicon Labs Z-Wave SDK

No mesmo produto, das mais perigosas para as menos.

CVE-2024-22472HIGHLong S0 frames received by 500 series Z-Wave devices may cause buffer overflowEPSS 0.8%CVE-2023-51395HIGHZ-Wave S0 Decryption Vulnerability in End DevicesEPSS 0.3%CVE-2026-89410MEDIUMOut-of-bounds read in Z-Wave NCP SPI HandlerEPSS 0.2%