Is CVE-2026-2815 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-2815 being exploited in the wild.

How severe is CVE-2026-2815?

Informational severity, with a CVSS score of 8.4, published 25 June 2026.

Which products and versions are affected?

Silicon Labs SiSDK <= 2025.12.1.

Is there a fix for CVE-2026-2815?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-2815 attacked?

It is attacked from the adjacent network, in device firmware.

Am I affected by CVE-2026-2815?

Check whether you run Silicon Labs EFR32xG27 Wireless SoC or Silicon Labs SiSDK at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-2815: Silicon Labs EFR32xG27 Predictable Key Generation in SiSDK

Q: Which products and versions are affected?

Silicon Labs SiSDK <= 2025.12.1.

Q: Is there a fix for CVE-2026-2815?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-2815 attacked?

It is attacked from the adjacent network, in device firmware.

Q: Am I affected by CVE-2026-2815?

Check whether you run Silicon Labs EFR32xG27 Wireless SoC or Silicon Labs SiSDK at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-2815 · Severity: info · CVSS 8.4 · Published 2026-06-25

A security flaw in Silicon Labs EFR32xG27 wireless chips causes the device to generate predictable security keys. These chips are commonly used in IoT devices for wireless communication; if an attacker can predict these keys, they may be able to decrypt sensitive data or bypass security protections. This issue stems from how the hardware's 'unclonable' security feature was implemented in the software development kit.

Technologies: Silicon Labs SiSDK. Vendors: Silicon Labs.

Quick answers

Is CVE-2026-2815 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-2815 being exploited in the wild.
How severe is CVE-2026-2815?: Informational severity, with a CVSS score of 8.4, published 25 June 2026.
Which products and versions are affected?: Silicon Labs SiSDK <= 2025.12.1.
Is there a fix for CVE-2026-2815?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-2815 attacked?: It is attacked from the adjacent network, in device firmware.
Am I affected by CVE-2026-2815?: Check whether you run Silicon Labs EFR32xG27 Wireless SoC or Silicon Labs SiSDK at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability exists in the Silicon Labs SiSDK (versions up to 2025.12.1) affecting EFR32xG27 wireless SoCs. The root cause is the incorrect use of the Physically Unclonable Function (PUF) key during the user key generation process, which results in a small seed space (CWE-339). This flaw makes the resulting cryptographic keys predictable. An attacker with adjacent network access could potentially exploit this to compromise the confidentiality and integrity of the device's secure communications. The issue is addressed in newer versions of the SiSDK.

Affected products

Silicon Labs SiSDK <= 2025.12.1
Silicon Labs EFR32xG27 Wireless SoC

Timeline

2026-06-25: advisory
2026-06-25: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.