CVE-2026-17610
Received Received - Intake

SiSDK v2026.6.0 Denial of Service via Network Traffic Load

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: Silicon Graphics (SGI)

Description
In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-09-17
AI Q&A
2026-08-28
EPSS Evaluated
2026-09-15
NVD
CVE-2026-17610
EUVD
EUVD-2026-67300

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
silicon_labs sisdk to 2026.6.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-404 The product does not release or incorrectly releases a resource before it is made available for re-use.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in SiSDK v2026.6.0 and earlier versions. High network traffic loads can cause a dropped ACK (acknowledgment) packet, leading to a denial of service condition. It specifically affects EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread.

Detection Guidance

Detecting this vulnerability requires monitoring network traffic for dropped ACK packets on EFR32MG24 and EFR32MG26 devices running Zigbee and Thread concurrently. Use network analyzers like Wireshark to capture and inspect Zigbee/Thread traffic for missing acknowledgments. Check device logs for timeout errors or connection drops during high traffic.

Impact Analysis

The vulnerability can cause network disruptions or outages for devices using EFR32MG24 and EFR32MG26 running Zigbee and Thread protocols. This may lead to loss of connectivity, interrupted services, or degraded performance in applications relying on these protocols.

Compliance Impact

This vulnerability causes a denial of service due to dropped ACKs under high network traffic, specifically affecting EFR32MG24 and EFR32MG26 devices running Zigbee and Thread concurrently. It does not directly impact compliance with GDPR or HIPAA as it is a technical DoS issue rather than a data protection or privacy breach.

Mitigation Strategies
  • Upgrade SiSDK to versions newer than v2026.6.0 to address the dropped ACK issue.
  • Disable concurrent multiprotocol operation for Zigbee and Thread on EFR32MG24 and EFR32MG26 devices if possible.
  • Implement traffic shaping or rate limiting to reduce network load and prevent congestion.
  • Monitor device performance and network traffic for signs of instability or dropped connections.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17610. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart