VDB
GCVE-110-NCSC-2026-415
GCVE-110-NCSC-2026-415
Advisory PublishedCVSS 7.0/10
ZigBee devices are vulnerable to denial of service through unsolicited encrypted rejoin responses causing node ID changes and uncontrolled resource consumption from malicious device joins exploiting a CWE-400 vulnerability.
Weaknesses (CWE)
CWE-940Improper Verification of Source of a Communication ChannelCWE-197Numeric Truncation ErrorCWE-908Use of Uninitialized ResourceCWE-176Improper Handling of Unicode EncodingCWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CWE-122Heap-based Buffer OverflowCWE-1336Improper Neutralization of Special Elements Used in a Template EngineCWE-863Incorrect AuthorizationCWE-671Lack of Administrator Control over SecurityCWE-352Cross-Site Request Forgery (CSRF)CWE-787Out-of-bounds Write
Risk Scores
CVSS 3.1
7.0/10
High · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Siemens | vers:unknown/* | — | — |
Aliases
CVE-2024-7322CVE-2025-6965CVE-2025-70873CVE-2025-71316CVE-2026-10207CVE-2026-11822CVE-2026-11824CVE-2026-33387CVE-2026-33388CVE-2026-33389CVE-2026-33391CVE-2026-33920CVE-2026-44414CVE-2026-44415CVE-2026-59241CVE-2026-63350CVE-2026-63351CVE-2026-63352CVE-2026-63353CVE-2026-63354CVE-2026-63355CVE-2026-63356CVE-2026-63357CVE-2026-72895CVE-2026-78556CVE-2026-78557CVE-2026-84854CVE-2026-85114CVE-2026-85115CVE-2026-89196CVE-2026-89197CVE-2026-89198CVE-2026-89199CVE-2026-89200CVE-2026-89201CVE-2026-89202CVE-2026-89203CVE-2026-89204CVE-2026-89205CVE-2026-89206CVE-2026-89208
References
Browse GCVE Records
3,384 records in the GCVE database · Updated October 13, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.