CVE-2026-89410: Out-of-bounds read in Z-Wave NCP SPI Handler
Published Oct 22, 2026
·Updated
In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information.
Affected Software
1 affected component
Silicon Labs Z-Wave SDK<=8.1.1
Event History
Oct 22, 2026
CVE Published
via MITRE·01:50 PM
Data Sourced
via MITRE·01:50 PM
DescriptionWeakness