CVE-2026-17610

RAIL 802.15.4 Mux missing ACK can lead to DoS

State: Published
Severity: 6.0 Medium
Published: Aug 27, 2026
Updated: Aug 28, 2026
Reserved: Jul 27, 2026

Description

In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread.

Scores

CVSS	Score	Vector	Source
4.0	6.0 Medium	CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N	Silabs

Weaknesses

CWE-404 Improper Resource Shutdown or Release

Affected Products

Product	Versions
SiSDKSilicon Labs	2026.6.0 and earlierAffected

References

https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/a45Vm000000F7VpIAK?operationContext=S1vendor-advisorypermissions-required
https://github.com/SiliconLabsSoftware/sisdk-release/tree/sisdk-2026.6patch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.