CVE-2026-66279
Dis-connect vulnerability in Connect Stack
In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.
CVSS 4.0 · 7.2 High
EPSS < 1%
KEV · Not listed
Vendors
Products