Skip to content
Sign in
7.2 High

CVE-2026-66279 In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass…

Description

In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.

Affected products and versions

Product Affected versions Fixed in
Connect SDK 4.0 4.0.0 → 4.3.1 No fix stated
Connect SDK 3.7 earliest → 3.7.7 No fix stated
Track this CVE