CVE-2026-66279 — Dis-connect vulnerability in Connect Stack
In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnera…
Published: 2026-10-22 · CVSS: 7.2 · CVSS 4.0
In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7