CVE-2026-66279
CVE-2026-66279 · Dis-connect vulnerability in Connect Stack
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.
CVSS 7.2 · High · EPSS 0.2%
- Published
- Updated
Affected products and versions
connect sdk
- Versions
- ≥ 4.0.0, ≤ 4.3.1: Affected (semver)
- ≥ 0, ≤ 3.7.7: Affected (semver)
No fix published