SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-6924

HIGH · CVSS 8.7 EPSS 0.26% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-23 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

The vulnerability in SiWx917 affects the deterministic random bit generator (DRBG), which utilizes a predictable seed, leading to the generation of identical random numbers in the Matter code. This predictability can compromise cryptographic operations, potentially allowing attackers to exploit the randomness for malicious purposes. Organizations utilizing the SiWx917 chip in their products should prioritize addressing this vulnerability to mitigate risks associated with predictable random number generation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-6924
Severity
HIGH
CVSS
8.7
EPSS
0.26%

Original NVD Description

A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated.