CVE-2026-89410
CVE-2026-89410 · Out-of-bounds read in Z-Wave NCP SPI Handler
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information.
CVSS 5.1 · Medium · EPSS 0.2%
- Published
- Updated
Affected products and versions
z-wave sdk
- Versions
- ≥ 0, ≤ 8.1.1: Affected (semver)
No fix published