https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:56:50.484790+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-337998 EUVD-2026-337998 2026-10-07T17:56:50.538690+00:00 EUVD-2026-337998 https://cve.radiocsirt.org/vuln/fkie_cve-2025-56361 fkie_cve-2025-56361 2026-10-07T17:56:50.538729+00:00

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4, specifically within the Level Control cluster's server tick logic (`emberAfLevelControlClusterServerTickCallback`). When a MoveToLevel command is executed and followed by a conflicting write to the OperationMode attribute (in the Pump Configuration and Control cluster), an invariant check (`minLevel < currentLevel`) fails and causes the device to abort. This leads to a denial of service condition. The issue is confirmed in SDK versions 1.3 and 1.4 (commit ab3d5ae), and is triggered remotely without authentication.

 https://cve.radiocsirt.org/vuln/ghsa-f6px-4w9c-rj4f GHSA-f6px-4w9c-rj4f 2026-10-07T17:56:50.538767+00:00

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4, specifically within the Level Control cluster's server tick logic (`emberAfLevelControlClusterServerTickCallback`). When a MoveToLevel command is executed and followed by a conflicting write to the OperationMode attribute (in the Pump Configuration and Control cluster), an invariant check (`minLevel < currentLevel`) fails and causes the device to abort. This leads to a denial of service condition. The issue is confirmed in SDK versions 1.3 and 1.4 (commit ab3d5ae), and is triggered remotely without authentication.