CVE-2026-89410

The Z-Wave SDK version 8.1.1 and earlier is vulnerable to an out-of-bounds read in the NCP SPI Handler . A malformed NCP SPI command can trigger this condition, potentially leading to the leak of sensitive information . The vulnerability is associated with CWE-1285 (Improper Validation of Specifi...

CVE-2026-89410 Out-of-bounds read in Z-Wave NCP SPI Handler

In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information...