CVE-2026-89409

In Z-Wave SDK 8.1.1 and earlier for 700/800 series devices and 6.85.02 and earlier for 500 series devices, missing checks in the ZWAVECMDNODESEXIST handler can result in nodes being removed from the network. These messages must come from a device that has already joined the network...

CVE-2026-89409 Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes​

In Z-Wave SDK 8.1.1 and earlier for 700/800 series devices and 6.85.02 and earlier for 500 series devices, missing checks in the ZWAVECMDNODESEXIST handler can result in nodes being removed from the network. These messages must come from a device that has already joined the network...

EUVD-2026-108186

In Z-Wave SDK 8.1.1 and earlier for 700/800 series devices and 6.85.02 and earlier for 500 series devices, missing checks in the ZWAVECMDNODESEXIST handler can result in nodes being removed from the network. These messages must come from a device that has already joined the network...

CVE-2026-89409

The Z-Wave SDK is vulnerable in versions 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices) due to missing checks in the ZWAVE_CMD_NODES_EXIST handler. This flaw, categorized under CWE-940 , allows an attacker to cause the deletion of end nodes from th...