CVE-2026-17610: RAIL 802.15.4 Mux missing ACK can lead to DoS
Published Aug 27, 2026
·Updated
In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread.
Affected Software
2 affected components
Silabs SiSDK<=2026.6.0
Silabs RAIL 802.15.4 Mux<=2026.6.0
Event History
Aug 27, 2026
CVE Published
via MITRE·10:17 PM
Data Sourced
via MITRE·10:17 PM
DescriptionWeakness
Frequently Asked Questions
1
Which deployments are affected?
The issue is limited to EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread. Other device families or non-concurrent Zigbee/Thread deployments are not identified as affected in the available information.
2
What conditions are required for denial of service?
High network traffic load is required, and the failure occurs when an ACK is dropped. The provided information does not state that an attacker needs authentication or local access.
3
Are current SiSDK releases before v2026.6.0 affected?
Yes. SiSDK v2026.6.0 and earlier are identified as affected.