Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-89410

Out-of-bounds read in Z-Wave NCP SPI Handler

In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Silabs
Products
Z-wave Sdk
CVE-2026-89409

Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes​

In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices), missing checks in the ZWAVE_CMD_NODES_EXIST handler can result in nodes being removed from the network. These messages must come from a device that has already joined the network.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Silabs
Products
Z-wave Sdk
CVE-2025-10693

Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure

When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1.

CVSS 4.0 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Silabs
Products
Z-wave Sdk